CVE-2020-29075 PDF Injection BlackHat Talk

🗓️ 23 Feb 2021 03:18:50Reported by adobeType

PDF Injection vulnerability in Acrobat Reade

Reporter	Title	Published	Views	Family All 27
Tenable Nessus	Adobe Acrobat < 2017.011.30188 / 2020.001.30018 / 2020.013.20074 Vulnerability (APSB20-75)	11 Dec 202000:00	–	nessus
Tenable Nessus	Adobe Reader < 2017.011.30188 / 2020.001.30018 / 2020.013.20074 Vulnerability (APSB20-75)	11 Dec 202000:00	–	nessus
Tenable Nessus	Adobe Acrobat < 2017.011.30188 / 2020.001.30018 / 2020.013.20074 Vulnerability (APSB20-75) (macOS)	11 Dec 202000:00	–	nessus
Tenable Nessus	Adobe Reader < 2017.011.30188 / 2020.001.30018 / 2020.013.20074 Vulnerability (APSB20-75) (macOS)	11 Dec 202000:00	–	nessus
Adobe	APSB20-75 Security update available for Adobe Acrobat and Reader	9 Dec 202000:00	–	adobe
BDU FSTEC	The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to insufficient input data validation. This vulnerability allows attackers to gain unauthorized access to protected information.	11 Nov 202100:00	–	bdu_fstec
Circl	CVE-2020-29075	23 Feb 202107:34	–	circl
CNNVD	Adobe Acrobat和Adobe Reader 信息泄露漏洞	9 Dec 202000:00	–	cnnvd
CNVD	Adobe Acrobat and Reader Information Disclosure Vulnerability (CNVD-2021-02375)	8 Jan 202100:00	–	cnvd
Check Point Advisories	Adobe Acrobat Data Exfiltration (CVE-2020-29075)	17 Dec 202000:00	–	checkpoint_advisories

[
  {
    "product": "Acrobat Reader DC",
    "vendor": "Adobe",
    "versions": [
      {
        "status": "affected",
        "version": "<= 2020.013.20066"
      },
      {
        "status": "affected",
        "version": "<= 2020.001.30010"
      },
      {
        "status": "affected",
        "version": "<= 2017.011.30180"
      }
    ]
  }
]

Source	Link
helpx	www.helpx.adobe.com/security/products/acrobat/apsb20-75.html

23 Feb 2021 03:18Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.17.1

EPSS0.07129

CWE-20