CVE-2023-38232 ZDI-CAN-21357: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

🗓️ 10 Aug 2023 13:17:34Reported by adobeType

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability in versions 23.003.20244 and 20.005.3046

Reporter	Title	Published	Views	Family All 25
Tenable Nessus	Adobe Acrobat < 20.005.30514.10514 / 23.003.20269 Multiple Vulnerabilities (APSB23-30)	8 Aug 202300:00	–	nessus
Tenable Nessus	Adobe Reader < 20.005.30514.10514 / 23.003.20269 Multiple Vulnerabilities (APSB23-30)	8 Aug 202300:00	–	nessus
Tenable Nessus	Adobe Acrobat < 20.005.30514.10514 / 23.003.20269 Multiple Vulnerabilities (APSB23-30) (macOS)	8 Aug 202300:00	–	nessus
Tenable Nessus	Adobe Reader < 20.005.30514.10514 / 23.003.20269 Multiple Vulnerabilities (APSB23-30) (macOS)	8 Aug 202300:00	–	nessus
BDU FSTEC	The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve memory-walking attacks, allowing attackers to execute arbitrary code.	31 Aug 202300:00	–	bdu_fstec
Circl	CVE-2023-38232	10 Aug 202318:15	–	circl
CNNVD	Adobe Acrobat Reader 缓冲区错误漏洞	10 Aug 202300:00	–	cnnvd
CNVD	Adobe Acrobat Reader Out-of-Bounds Read Vulnerability (CNVD-2023-71746)	12 Aug 202300:00	–	cnvd
CVE	CVE-2023-38232	10 Aug 202313:17	–	cve
EUVD	EUVD-2023-42052	3 Oct 202520:07	–	euvd

[
  {
    "defaultStatus": "affected",
    "product": "Acrobat Reader",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "23.003.20244",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
helpx	www.helpx.adobe.com/security/products/acrobat/apsb23-30.html

10 Aug 2023 13:17Current

6Medium risk

Vulners AI Score6

CVSS 3.15.5

EPSS0.00082

CWE-125