KLA61972 Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. Use after free vulnerability can be exploited execute arbitrary code.
2. Out of bounds read vulnerability can be exploited to execute arbitrary code.
3. Uninitialized pointer vulnerability can be exploited to execute arbitrary code.
4. Out of bounds write vulnerability can be exploited to execute arbitrary code.
5. Out of bounds read vulnerability can be exploited to obtain sensitive information.
6. Use after free vulnerability can be exploited obtain sensitive information.

Original advisories

Adobe Security Bulletin

Related products

Adobe-Acrobat-Reader-DC-Continuous

Adobe-Acrobat-DC-Continuous

Adobe-Acrobat-Reader-2020

Adobe-Acrobat-2020

CVE list

CVE-2023-44336 critical

CVE-2023-44337 critical

CVE-2023-44338 critical

CVE-2023-44359 critical

CVE-2023-44365 critical

CVE-2023-44366 critical

CVE-2023-44367 critical

CVE-2023-44371 critical

CVE-2023-44372 critical

CVE-2023-44339 high

CVE-2023-44340 high

CVE-2023-44348 high

CVE-2023-44356 high

CVE-2023-44357 high

CVE-2023-44358 high

CVE-2023-44360 high

CVE-2023-44361 high

Solution

Update to the latest version

Download Adobe Acrobat Reader DC

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Adobe Acrobat DC Continuous earlier than 23.006.20380
  Adobe Acrobat Reader DC Continuous earlier than 23.006.20380
  Adobe Acrobat 2020 earlier than 20.005.30539
  Adobe Acrobat Reader 2020 earlier than 20.005.30539