CVE-2020-24434 Acrobat Pro DC Out-Of-Bounds Read Vulnerability Could Lead to Information Disclosure

🗓️ 05 Nov 2020 19:32:19Reported by adobeType

CVE-2020-24434 Acrobat Pro DC Out-Of-Bounds Read Vulnerability Leading to Information Disclosur

Reporter	Title	Published	Views	Family All 29
Tenable Nessus	Adobe Acrobat < 2017.011.30180 / 2020.001.30010 / 2020.013.20064 Multiple Vulnerabilities (APSB20-67)	5 Nov 202000:00	–	nessus
Tenable Nessus	Adobe Reader < 2017.011.30180 / 2020.001.30010 / 2020.013.20064 Multiple Vulnerabilities (APSB20-67)	5 Nov 202000:00	–	nessus
Tenable Nessus	Adobe Acrobat < 2017.011.30180 / 2020.001.30010 / 2020.013.20064 Multiple Vulnerabilities (APSB20-67) (macOS)	5 Nov 202000:00	–	nessus
Tenable Nessus	Adobe Reader < 2017.011.30180 / 2020.001.30010 / 2020.013.20064 Multiple Vulnerabilities (APSB20-67) (macOS)	5 Nov 202000:00	–	nessus
ATTACKERKB	CVE-2020-24434	3 Nov 202023:00	–	attackerkb
BDU FSTEC	The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to reading data beyond the buffer in memory. This allows attackers to disclose protected information.	8 Dec 202000:00	–	bdu_fstec
Circl	CVE-2020-24434	5 Nov 202022:49	–	circl
CNVD	Adobe Acrobat and Reader Out-of-Bounds Read Vulnerability (CNVD-2020-61006)	4 Nov 202000:00	–	cnvd
Check Point Advisories	Adobe Acrobat and Reader Out-of-bounds Read (APSB20-67: CVE-2020-24434)	10 Nov 202000:00	–	checkpoint_advisories
CVE	CVE-2020-24434	5 Nov 202019:32	–	cve

[
  {
    "product": "Acrobat Reader",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "2017.011.30175",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "2020.012.20048",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "2020.001.30005",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "None",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-20-1356/
helpx	www.helpx.adobe.com/security/products/acrobat/apsb20-67.html

10 Nov 2020 16:06Current

4.7Medium risk

Vulners AI Score4.7

CVSS 3.13.3

EPSS0.03023

CWE-125