CVE-2024-20747 TALOS-2023-1908 - Adobe Acrobat Reader Font CharStrings INDEX out-of-bounds read vulnerability

🗓️ 15 Feb 2024 12:18:41Reported by adobeType

Adobe Acrobat Reader Font CharStrings INDEX out-of-bounds read vulnerability affects versions 20.005.30539, 23.008.20470, and earlier, allowing disclosure of sensitive memory. Exploitation requires user interaction

Reporter	Title	Published	Views	Family All 26
Tenable Nessus	Adobe Acrobat < 20.005.30574 / 23.008.20533 Multiple Vulnerabilities (APSB24-07)	13 Feb 202400:00	–	nessus
Tenable Nessus	Adobe Reader < 20.005.30574 / 23.008.20533 Multiple Vulnerabilities (APSB24-07)	13 Feb 202400:00	–	nessus
Tenable Nessus	Adobe Acrobat < 20.005.30574 / 23.008.20533 Multiple Vulnerabilities (APSB24-07) (macOS)	13 Feb 202400:00	–	nessus
Tenable Nessus	Adobe Reader < 20.005.30574 / 23.008.20533 Multiple Vulnerabilities (APSB24-07) (macOS)	13 Feb 202400:00	–	nessus
BDU FSTEC	The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Reader 2020 lies in their ability to read data beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.	19 Feb 202400:00	–	bdu_fstec
Circl	CVE-2024-20747	15 Feb 202414:32	–	circl
CNNVD	Adobe Acrobat Reader 缓冲区错误漏洞	15 Feb 202400:00	–	cnnvd
CNVD	Adobe Acrobat and Reader Out-of-Bounds Read Vulnerability (CNVD-2024-11664)	29 Feb 202400:00	–	cnvd
CVE	CVE-2024-20747	15 Feb 202412:18	–	cve
EUVD	EUVD-2024-18462	3 Oct 202520:07	–	euvd

[
  {
    "defaultStatus": "affected",
    "product": "Acrobat Reader",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "23.008.20470",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2023-1908
helpx	www.helpx.adobe.com/security/products/acrobat/apsb24-07.html

15 Feb 2024 12:20Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.15.5

EPSS0.0007

CWE-125