Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA11991
HistoryNov 03, 2020 - 12:00 a.m.

KLA11991 Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

2020-11-0300:00:00
Kaspersky Lab
threats.kaspersky.com
63

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.179 Low

EPSS

Percentile

96.1%

JSON

Detect date:

11/03/2020

Severity:

High

Description:

Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information, cause denial of service.

Affected products:

Adobe Acrobat DC Continuous earlier than 2020.013.20064
Adobe Acrobat 2020 Classic earlier than 2020.001.30010
Adobe Acrobat 2017 Classic earlier than 2017.011.30180
Adobe Acrobat Reader DC Continuous earlier than 2020.013.20064
Adobe Acrobat Reader 2020 Classic earlier than 2020.001.30010
Adobe Acrobat Reader 2017 Classic earlier than 2017.011.30180

Solution:

Update to the latest version
Download Adobe Acrobat Reader DC

Original advisories:

APSB20-67

Impacts:

ACE

Related products:

Adobe Acrobat Reader DC Continuous

CVE-IDS:

CVE-2020-244297.8Critical
CVE-2020-244357.8Critical
CVE-2020-244367.8Critical
CVE-2020-244392.8Warning
CVE-2020-244314.4Warning
CVE-2020-244377.8Critical
CVE-2020-244287.7Critical
CVE-2020-244337.8Critical
CVE-2020-244343.3Warning
CVE-2020-244273.3Warning
CVE-2020-244263.3Warning
CVE-2020-244307.8Critical
CVE-2020-244383.3Warning
CVE-2020-244327.8Critical

References

Related

nessus 4
openvas 12
threatpost 2
adobe 1
prion 14
checkpoint_advisories 10
cve 14
talos 2
zdi 4
thn 1
nessus
nessus
Adobe Acrobat <= 2017.011.30175 / 2020.001.30005 / 2020.012.20048 Multiple Vulnerabilities (APSB20-67) (macOS)
2020-11-05 00:00:00
Adobe Acrobat <= 2017.011.30175 / 2020.001.30005 / 2020.012.20048 Multiple Vulnerabilities (APSB20-67)
2020-11-05 00:00:00
Adobe Reader <= 2017.011.30175 / 2020.001.30005 / 2020.012.20048 Multiple Vulnerabilities (APSB20-67)
2020-11-05 00:00:00
openvas
openvas
Adobe Reader DC 2020 Security Update (APSB20-67) - Windows
2020-11-04 00:00:00
Adobe Reader 2017 Security Update (APSB20-67) - Windows
2020-11-04 00:00:00
Adobe Acrobat DC 2020 Security Update (APSB20-67) - Windows
2020-11-04 00:00:00
threatpost
threatpost
Adobe Warns Windows, MacOS Users of Critical Acrobat and Reader Flaws
2020-11-03 15:55:09
PDF Feature ‘Certified’ Widely Vulnerable to Attack
2021-05-26 20:14:30
adobe
adobe
APSB20-67 Security update available for Adobe Acrobat and Reader
2020-11-03 00:00:00
prion
prion
Design/Logic Flaw
2020-11-05 20:15:00
Design/Logic Flaw
2020-11-05 20:15:00
Input validation
2020-11-05 20:15:00
checkpoint_advisories
checkpoint_advisories
Adobe Acrobat and Reader Use After Free (APSB20-67: CVE-2020-24430)
2020-11-10 00:00:00
Adobe Acrobat and Reader Privilege Escalation (APSB20-67: CVE-2020-24433)
2020-11-10 00:00:00
Adobe Acrobat and Reader Memory Corruption (APSB20-67: CVE-2020-24427)
2020-11-10 00:00:00
cve
cve
CVE-2020-24438
2020-11-05 20:15:00
CVE-2020-24428
2020-11-05 20:15:00
CVE-2020-24426
2020-11-05 20:15:00
talos
talos
Adobe Acrobat Reader DC form field format use after free
2020-11-05 00:00:00
Adobe Acrobat Reader DC JavaScript submitForm heap buffer overflow redux
2020-11-05 00:00:00
zdi
zdi
Adobe Acrobat Reader DC AVDocumentLocal Use-After-Free Information Disclosure Vulnerability
2020-11-10 00:00:00
Adobe Acrobat Reader DC ID Parameter Out-Of-Bounds Read Information Disclosure Vulnerability
2020-11-10 00:00:00
Adobe Acrobat Pro DC PDF Export Out-Of-Bounds Write Remote Code Execution Vulnerability
2020-11-10 00:00:00
thn
thn
Researchers Demonstrate 2 New Hacks to Modify Certified PDF Documents
2021-05-29 08:34:00

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.179 Low

EPSS

Percentile

96.1%

JSON
Related for KLA11991
nessus4openvas12threatpost2adobe1prion14checkpoint_advisories10cve14talos2zdi4thn1