CVE-2020-24439 Acrobat Reader DC for macOS Signature Validation Bypass

🗓️ 05 Nov 2020 19:32:50Reported by adobeType

Acrobat Reader DC for macOS security bypass vulnerability fix

Reporter	Title	Published	Views	Family All 28
Tenable Nessus	Adobe Acrobat < 2017.011.30180 / 2020.001.30010 / 2020.013.20064 Multiple Vulnerabilities (APSB20-67)	5 Nov 202000:00	–	nessus
Tenable Nessus	Adobe Reader < 2017.011.30180 / 2020.001.30010 / 2020.013.20064 Multiple Vulnerabilities (APSB20-67)	5 Nov 202000:00	–	nessus
Tenable Nessus	Adobe Acrobat < 2017.011.30180 / 2020.001.30010 / 2020.013.20064 Multiple Vulnerabilities (APSB20-67) (macOS)	5 Nov 202000:00	–	nessus
Tenable Nessus	Adobe Reader < 2017.011.30180 / 2020.001.30010 / 2020.013.20064 Multiple Vulnerabilities (APSB20-67) (macOS)	5 Nov 202000:00	–	nessus
ATTACKERKB	CVE-2020-24439	3 Nov 202023:00	–	attackerkb
BDU FSTEC	The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to errors in verifying cryptographic signatures. These vulnerabilities allow attackers to circumvent existing security restrictions.	8 Dec 202000:00	–	bdu_fstec
Circl	CVE-2020-24439	5 Nov 202022:49	–	circl
CNVD	Adobe Acrobat and Reader Signature Verification Bypass Vulnerability	4 Nov 202000:00	–	cnvd
CVE	CVE-2020-24439	5 Nov 202019:32	–	cve
EUVD	EUVD-2020-17159	7 Oct 202500:30	–	euvd

[
  {
    "product": "Acrobat Reader",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "2017.011.30175",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "2020.012.20048",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "2020.001.30005",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "None",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
helpx	www.helpx.adobe.com/security/products/acrobat/apsb20-67.html

11 Jun 2021 17:31Current

4.2Medium risk

Vulners AI Score4.2

CVSS 3.12.8

EPSS0.00092

CWE-347