KLA66493 Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service.

Below is a complete list of vulnerabilities:

1. Use after free vulnerability can be exploited to cause denial of service or execute arbitrary code.
2. Out of bounds memory read vulnerability can be exploited to cause denial of service.

Original advisories

APSB24-07

Related products

Adobe-Acrobat-Reader-DC-Continuous

Adobe-Acrobat-DC-Continuous

Adobe-Acrobat-Reader-2020

Adobe-Acrobat-2020

CVE list

CVE-2024-30303 critical

CVE-2024-30304 critical

CVE-2024-30301 critical

CVE-2024-30302 high

CVE-2024-30306 critical

CVE-2024-30305 critical

Solution

Update to the latest version

Download Adobe Acrobat

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Adobe Acrobat DC Continuous earlier than 23.008.20533Adobe Acrobat Reader DC Continuous earlier than 23.008.20533Adobe Acrobat 2020  earlier than 20.005.30574Adobe Acrobat Reader 2020 earlier than 20.005.30574