KLA12203 Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code.

Below is a complete list of vulnerabilities:

1. A use after free vulnerability can be exploited to execute arbitrary code.
2. An out of bounds read vulnerability can be exploited to execute arbitrary code.

Original advisories

APSB21-37

Related products

Adobe-Acrobat-Reader-DC-Continuous

Adobe-Acrobat-DC-Continuous

Adobe-Acrobat-Reader-2017

Adobe-Acrobat-2017

Adobe-Acrobat-Reader-2020

Adobe-Acrobat-2020

CVE list

CVE-2021-28631 unknown

CVE-2021-28632 unknown

CVE-2021-28551 unknown

CVE-2021-28552 unknown

CVE-2021-28554 unknown

Solution

Update to the latest version

Download Adobe Acrobat Reader DC

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• Adobe Acrobat 2020 Classic earlier than 2020.004.30005Adobe Acrobat 2017 Classic earlier than 2017.011.30197Adobe Acrobat Reader 2020 Classic earlier than 2020.004.30005Adobe Acrobat Reader 2017 Classic earlier than 2017.011.30197Adobe Acrobat DC Continuous earlier than 2021.005.20048Adobe Acrobat Reader DC Continuous earlier than 2021.005.20048