CVE-2024-30280 ZDI-CAN-22867: Adobe Acrobat Pro DC AcroForm Annotation Out-Of-Bounds Read Remote Code Execution Vulnerability

🗓️ 23 May 2024 08:29:10Reported by adobeType

Adobe Acrobat Pro DC AcroForm Annotation Out-Of-Bounds Read Remote Code Execution Vulnerability Acrobat Reader affected by out-of-bounds read when parsing crafted fil

Reporter	Title	Published	Views	Family All 22
Tenable Nessus	Adobe Acrobat < 20.005.30635 / 24.002.20759 Multiple Vulnerabilities (APSB24-29)	14 May 202400:00	–	nessus
Tenable Nessus	Adobe Reader < 20.005.30635 / 24.002.20759 Multiple Vulnerabilities (APSB24-29)	14 May 202400:00	–	nessus
Tenable Nessus	Adobe Acrobat < 20.005.30635 / 24.002.20759 Multiple Vulnerabilities (APSB24-29) (macOS)	14 May 202400:00	–	nessus
Tenable Nessus	Adobe Reader < 20.005.30635 / 24.002.20759 Multiple Vulnerabilities (APSB24-29) (macOS)	14 May 202400:00	–	nessus
BDU FSTEC	The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve an exploit where operations are performed outside the buffer in memory, allowing attackers to execute arbitrary code.	17 Jun 202400:00	–	bdu_fstec
CNNVD	Adobe Acrobat Reader 缓冲区错误漏洞	23 May 202400:00	–	cnnvd
CNVD	Adobe Acrobat Reader buffer overflow vulnerability (CNVD-2024-24738)	27 May 202400:00	–	cnvd
CVE	CVE-2024-30280	23 May 202408:29	–	cve
EUVD	EUVD-2024-28201	3 Oct 202520:07	–	euvd
Kaspersky	KLA67474 Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader	14 May 202400:00	–	kaspersky

[
  {
    "defaultStatus": "affected",
    "product": "Acrobat Reader",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "24.002.20736",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
helpx	www.helpx.adobe.com/security/products/acrobat/apsb24-29.html

23 May 2024 08:29Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.8

EPSS0.02762

CWE-125