The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat, and Adobe Acrobat Reader lies in insufficient validation of input data, allowing attackers to execute arbitrary code.

🗓️ 24 Aug 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

Adobe PDF viewer and editor flaws enable code execution via malicious files from poor input.

Reporter	Title	Published	Views	Family All 24
Tenable Nessus	Adobe Acrobat < 17.012.30262 / 20.005.30381 / 22.002.20191 Multiple Vulnerabilities (APSB22-39)	9 Aug 202200:00	–	nessus
Tenable Nessus	Adobe Reader < 17.012.30262 / 20.005.30381 / 22.002.20191 Multiple Vulnerabilities (APSB22-39)	9 Aug 202200:00	–	nessus
Tenable Nessus	Adobe Acrobat < 17.012.30262 / 20.005.30381 / 22.002.20191 Multiple Vulnerabilities (APSB22-39) (macOS)	9 Aug 202200:00	–	nessus
Tenable Nessus	Adobe Reader < 17.012.30262 / 20.005.30381 / 22.002.20191 Multiple Vulnerabilities (APSB22-39) (macOS)	9 Aug 202200:00	–	nessus
Circl	CVE-2022-35666	11 Aug 202218:38	–	circl
CNNVD	Adobe Acrobat Reader 输入验证错误漏洞	10 Aug 202200:00	–	cnnvd
CNVD	Adobe Acrobat Reader Input Validation Error Vulnerability (CNVD-2022-58462)	12 Aug 202200:00	–	cnvd
Check Point Advisories	Adobe Acrobat and Reader Improper Input Validation (APSB22-39: CVE-2022-35666)	9 Aug 202200:00	–	checkpoint_advisories
CVE	CVE-2022-35666	11 Aug 202214:45	–	cve
Cvelist	CVE-2022-35666 Adobe Acrobat Reader Improper Input Validation Remote Code Execution Vulnerability	11 Aug 202214:45	–	cvelist

Source	Link
helpx	www.helpx.adobe.com/security/products/acrobat/apsb22-39.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-35666
vuldb	www.vuldb.com/ru/
youtube	www.youtube.com/watch
web	www.web.nvd.nist.gov/view/vuln/detail

24 Aug 2022 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 27.2

CVSS 37.8

EPSS0.06911

adobe pdf viewer adobe pdf editor input validation code execution malicious files