Adobe Acrobat and Reader are vulnerable to logic flaws

🗓️ 18 Jun 2020 00:00:00Reported by China National Vulnerability DatabaseType

Adobe Acrobat and Reader are vulnerable to logic flaws that allow security bypass and arbitrary code execution

Reporter	Title	Published	Views	Family All 45
Tenable Nessus	Adobe Acrobat < 2015.006.30523 / 2017.011.30171 / 2020.009.20063 Multiple Vulnerabilities (APSB20-24)	13 May 202000:00	–	nessus
Tenable Nessus	Adobe Reader < 2015.006.30523 / 2017.011.30171 / 2020.009.20063 Multiple Vulnerabilities (APSB20-24)	13 May 202000:00	–	nessus
Tenable Nessus	Adobe Acrobat < 2015.006.30523 / 2017.011.30171 / 2020.009.20063 Multiple Vulnerabilities (APSB20-24) (macOS)	13 May 202000:00	–	nessus
Tenable Nessus	Adobe Reader < 2015.006.30523 / 2017.011.30171 / 2020.009.20063 Multiple Vulnerabilities (APSB20-24) (macOS)	13 May 202000:00	–	nessus
BDU FSTEC	The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, Adobe Acrobat Reader 2015 are caused by synchronization errors when using a shared resource. This vulnerability allows attackers to circumvent existing security restrictions.	5 Jun 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to privilege management errors, allowing an attacker to execute arbitrary code.	17 Jun 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to privilege management errors, allowing an attacker to execute arbitrary code.	17 Jun 202000:00	–	bdu_fstec
CNVD	Security Bypass Vulnerability in Multiple Adobe Products (CNVD-2020-41474)	13 May 202000:00	–	cnvd
CNVD	Security Bypass Vulnerability in Multiple Adobe Products (CNVD-2020-41475)	13 May 202000:00	–	cnvd
CNVD	Competitive Condition Vulnerability for Multiple Adobe Products	13 May 202000:00	–	cnvd

Source	Link
helpx	www.helpx.adobe.com/security/products/acrobat/apsb20-24.html

02 Aug 2020 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 26.8

CVSS 3.17.8

EPSS0.02242