Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-58460
HistoryAug 12, 2022 - 12:00 a.m.

Adobe Acrobat Reader Resource Management Error Vulnerability (CNVD-2022-58460)

2022-08-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
7

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.01 Low

EPSS

Percentile

83.5%

Adobe Acrobat Reader is a PDF viewer from Adobe, Inc. The software is used to print, sign and annotate PDFs. Adobe Acrobat Reader is vulnerable to a resource management error, which stems from post-release reuse. The vulnerability stems from a mix-up in the program’s instructions responsible for freeing memory. An attacker could exploit this vulnerability to execute arbitrary code.

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.01 Low

EPSS

Percentile

83.5%