The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to reading beyond the buffer in memory, allowing attackers to execute arbitrary code.

🗓️ 07 Feb 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Adobe PDF viewers and editors have buffer overread flaws enabling code execution via crafted files.

Reporter	Title	Published	Views	Family All 27
Tenable Nessus	Adobe Acrobat < 2017.011.30197 / 2020.004.30005 / 2021.005.20048 Multiple Vulnerabilities (APSB21-37)	8 Jun 202100:00	–	nessus
Tenable Nessus	Adobe Reader < 2017.011.30197 / 2020.004.30005 / 2021.005.20048 Multiple Vulnerabilities (APSB21-37)	8 Jun 202100:00	–	nessus
Tenable Nessus	Adobe Acrobat < 2017.011.30197 / 2020.004.30005 / 2021.005.20048 Multiple Vulnerabilities (APSB21-37) (macOS)	8 Jun 202100:00	–	nessus
Tenable Nessus	Adobe Reader < 2017.011.30197 / 2020.004.30005 / 2021.005.20048 Multiple Vulnerabilities (APSB21-37) (macOS)	8 Jun 202100:00	–	nessus
CNNVD	Adobe Acrobat Reader 缓冲区错误漏洞	8 Jun 202100:00	–	cnnvd
CNVD	Adobe Acrobat/Reader Out-of-Bounds Read Vulnerability (CNVD-2021-45947)	9 Jun 202100:00	–	cnvd
Check Point Advisories	Adobe Acrobat Reader DC Path Join Out of Bounds Read (APSB21-37: CVE-2021-28554)	8 Jun 202100:00	–	checkpoint_advisories
CVE	CVE-2021-28554	24 Aug 202117:50	–	cve
Cvelist	CVE-2021-28554 Adobe Acrobat Reader DC Path Parsing Out-Of-Bounds Read could lead to arbitrary code execution	24 Aug 202117:50	–	cvelist
Kaspersky	KLA12203 Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader	8 Jun 202100:00	–	kaspersky

Vulners

Node

adobe_systems adobe_acrobat_document_cloudRange<2021.005.20048continuous

OR

adobe_systems adobe_acrobat_reader_document_cloudRange<2021.005.20048continuous

Source	Link
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2021060839
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-28554
helpx	www.helpx.adobe.com/security/products/acrobat/apsb21-37.html
web	www.web.nvd.nist.gov/view/vuln/detail

07 Feb 2022 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 38.8

CVSS 29.3

EPSS0.27353

buffer overread code execution malicious documents adobe acrobat viewers adobe acrobat editors