The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, Adobe Acrobat Reader 2020, Foxit PDF Reader, and Foxit PDF Editor are related to buffer overflow attacks in dynamic memory, allowing attackers to execute arbitrary code.

🗓️ 07 Feb 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 6 Views

PDF viewers and editors have dynamic memory buffer overflow enabling arbitrary code execution via a malicious file.

Reporter	Title	Published	Views	Family All 37
Tenable Nessus	Adobe Acrobat < 17.011.30207 / 20.004.30020 / 21.011.20039 Multiple Vulnerabilities (APSB22-01)	12 Jan 202200:00	–	nessus
Tenable Nessus	Adobe Reader < 17.011.30207 / 20.004.30020 / 21.011.20039 Multiple Vulnerabilities (APSB22-01)	12 Jan 202200:00	–	nessus
Tenable Nessus	Foxit PDF Editor < 11.2.1 Multiple Vulnerabilities	29 Jan 202200:00	–	nessus
Tenable Nessus	Foxit PhantomPDF < 10.1.7 Multiple Vulnerabilities	3 Mar 202200:00	–	nessus
Tenable Nessus	Foxit PDF Reader < 11.2.1 Multiple Vulnerabilities	29 Jan 202200:00	–	nessus
Tenable Nessus	Adobe Acrobat < 17.011.30207 / 20.004.30020 / 21.011.20039 Multiple Vulnerabilities (APSB22-01) (macOS)	12 Jan 202200:00	–	nessus
Tenable Nessus	Adobe Reader < 17.011.30207 / 20.004.30020 / 21.011.20039 Multiple Vulnerabilities (APSB22-01) (macOS)	12 Jan 202200:00	–	nessus
ATTACKERKB	CVE-2021-44708	11 Jan 202223:00	–	attackerkb
CNNVD	Adobe Acrobat Reader缓冲区错误漏洞	11 Jan 202200:00	–	cnnvd
CNVD	Adobe Acrobat Reader DC buffer overflow vulnerability	17 Jan 202200:00	–	cnvd

Vulners

Node

foxit_software pdf_readerRange≤11.1.0.52543

OR

foxit_software pdf_editorRange≤10.1.6.37749

OR

foxit_software pdf_editorRange≤11.2.0.53415

Source	Link
helpx	www.helpx.adobe.com/security/products/acrobat/apsb22-01.html
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2022012806
safe-surf	www.safe-surf.ru/upload/VULN/VULN-20220202.5.pdf
foxit	www.foxit.com/support/security-bulletins.html
web	www.web.nvd.nist.gov/view/vuln/detail

07 Feb 2022 00:00Current

8.1High risk

Vulners AI Score8.1

CVSS 27.2

CVSS 37.8

EPSS0.39318

document viewer document editor buffer overflow dynamic memory arbitrary code execution malicious file