Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-56130
HistoryJul 29, 2022 - 12:00 a.m.

Adobe Acrobat and Adobe Reader Buffer Overflow Vulnerability (CNVD-2022-56130)

2022-07-2900:00:00
China National Vulnerability Database
www.cnvd.org.cn
6

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Adobe Acrobat and Adobe Reader are both Adobe products. Adobe Acrobat is a set of PDF file editing and conversion tools. Adobe Reader is a set of PDF document reading software. Adobe Acrobat and Adobe Reader are vulnerable to buffer overflow. The vulnerability stems from the existence of a reuse error when dealing with PDF files after release, the attacker can use the vulnerability arbitrary code execution.

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H