CVE-2023-38230 ZDI-CAN-21318: Adobe Acrobat Reader DC Font Parsing Use-After-Free Information Disclosure Vulnerability

🗓️ 10 Aug 2023 13:17:27Reported by adobeType

Adobe Acrobat Reader vulnerability 23.003.20244 and 20.005.3046

Reporter	Title	Published	Views	Family All 25
Tenable Nessus	Adobe Acrobat < 20.005.30514.10514 / 23.003.20269 Multiple Vulnerabilities (APSB23-30)	8 Aug 202300:00	–	nessus
Tenable Nessus	Adobe Reader < 20.005.30514.10514 / 23.003.20269 Multiple Vulnerabilities (APSB23-30)	8 Aug 202300:00	–	nessus
Tenable Nessus	Adobe Acrobat < 20.005.30514.10514 / 23.003.20269 Multiple Vulnerabilities (APSB23-30) (macOS)	8 Aug 202300:00	–	nessus
Tenable Nessus	Adobe Reader < 20.005.30514.10514 / 23.003.20269 Multiple Vulnerabilities (APSB23-30) (macOS)	8 Aug 202300:00	–	nessus
BDU FSTEC	The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve memory management issues after memory is freed, allowing attackers to execute arbitrary code.	31 Aug 202300:00	–	bdu_fstec
CNNVD	Adobe Acrobat Reader 资源管理错误漏洞	10 Aug 202300:00	–	cnnvd
CNVD	Adobe Acrobat Reader post-release reuse vulnerability (CNVD-2023-71755)	12 Aug 202300:00	–	cnvd
CVE	CVE-2023-38230	10 Aug 202313:17	–	cve
EUVD	EUVD-2023-42050	3 Oct 202520:07	–	euvd
Kaspersky	KLA51723 Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader	8 Aug 202300:00	–	kaspersky

[
  {
    "defaultStatus": "affected",
    "product": "Acrobat Reader",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "23.003.20244",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
helpx	www.helpx.adobe.com/security/products/acrobat/apsb23-30.html

10 Aug 2023 13:17Current

6Medium risk

Vulners AI Score6

CVSS 3.15.5

EPSS0.02627

CWE-416