CVE-2023-38243 ZDI-CAN-21252: Adobe Acrobat Reader DC JBIG2 File Parsing Use-After-Free Information Disclosure Vulnerability

🗓️ 10 Aug 2023 13:17:23Reported by adobeType

Adobe Acrobat Reader DC JBIG2 File Parsing Use-After-Free Information Disclosure Vulnerability in versions 23.003.20244 and earlier, and 20.005.30467 and earlier, allows memory disclosure through a malicious file

Reporter	Title	Published	Views	Family All 25
Tenable Nessus	Adobe Acrobat < 20.005.30514.10514 / 23.003.20269 Multiple Vulnerabilities (APSB23-30)	8 Aug 202300:00	–	nessus
Tenable Nessus	Adobe Reader < 20.005.30514.10514 / 23.003.20269 Multiple Vulnerabilities (APSB23-30)	8 Aug 202300:00	–	nessus
Tenable Nessus	Adobe Acrobat < 20.005.30514.10514 / 23.003.20269 Multiple Vulnerabilities (APSB23-30) (macOS)	8 Aug 202300:00	–	nessus
Tenable Nessus	Adobe Reader < 20.005.30514.10514 / 23.003.20269 Multiple Vulnerabilities (APSB23-30) (macOS)	8 Aug 202300:00	–	nessus
BDU FSTEC	The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve memory management issues after memory is freed, allowing attackers to cause memory corruption.	29 Aug 202300:00	–	bdu_fstec
Circl	CVE-2023-38243	10 Aug 202318:15	–	circl
CNNVD	Adobe Acrobat Reader 资源管理错误漏洞	10 Aug 202300:00	–	cnnvd
CNVD	Adobe Acrobat Reader post-release reuse vulnerability (CNVD-2023-71758)	12 Aug 202300:00	–	cnvd
CVE	CVE-2023-38243	10 Aug 202313:17	–	cve
EUVD	EUVD-2023-42063	3 Oct 202520:07	–	euvd

[
  {
    "defaultStatus": "affected",
    "product": "Acrobat Reader",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "23.003.20244",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
helpx	www.helpx.adobe.com/security/products/acrobat/apsb23-30.html

10 Aug 2023 13:17Current

6Medium risk

Vulners AI Score6

CVSS 3.15.5

EPSS0.0007

CWE-416