KLA11676 Multiple vulnerabilities in Adobe Acrobat

Multiple vulnerabilities were found in Adobe Acrobat. Malicious users can exploit these vulnerabilities to execute arbitrary code.

Below is a complete list of vulnerabilities:

1. Buffer errors vulnerability can be exploited to execute arbitrary code.
2. Use After Free vulnerability can be exploited to execute arbitrary code.

Original advisories

APSB19-49

Related products

Adobe-Acrobat

Adobe-Acrobat-Reader-DC-Continuous

Adobe-Acrobat-Reader-DC-Classic

Adobe-Acrobat-DC-Continuous

Adobe-Acrobat-DC-Classic

Adobe-Acrobat-Reader-2017

Adobe-Acrobat-2017

Adobe-Acrobat-Reader

CVE list

CVE-2019-16470 unknown

CVE-2019-16471 unknown

Solution

Update to the latest version

Download Adobe Acrobat Reader DC

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• Acrobat DC Continuous earlier than 2019.021.20047Acrobat Reader DC Continuous earlier than 2019.021.20047Acrobat 2017 Classic 2017 earlier than 2017.011.30150Acrobat Reader 2017 Classic 2017 earlier than 2017.011.30150Acrobat 2015 Classic 2015 earlier than 2015.006.30504Acrobat Reader 2015 Classic 2015 earlier than 2015.006.30504