Vulnerabilities fixed in Adobe Acrobat and Acrobat Reader

🗓️ 14 Aug 2024 12:52:29Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 5 Views

Adobe fixed vulnerabilities in Acrobat and Acrobat Reader; attackers could execute arbitrary code via a rogue file.

Reporter	Title	Published	Views	Family All 131
Tenable Nessus	Adobe Acrobat < 20.005.30655 / 24.001.30159 / 24.002.21005 Multiple Vulnerabilities (APSB24-57)	15 Aug 202400:00	–	nessus
Tenable Nessus	Adobe Reader < 20.005.30655 / 24.002.21005 Multiple Vulnerabilities (APSB24-57)	15 Aug 202400:00	–	nessus
Tenable Nessus	Adobe Acrobat < 20.005.30655 / 24.001.30159 / 24.002.21005 Multiple Vulnerabilities (APSB24-57) (macOS)	15 Aug 202400:00	–	nessus
Tenable Nessus	Adobe Reader < 20.005.30655 / 24.002.21005 Multiple Vulnerabilities (APSB24-57) (macOS)	15 Aug 202400:00	–	nessus
BDU FSTEC	The vulnerability of the AV3DVirtAnnot function in PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, Adobe Acrobat 2024, and Adobe Acrobat Reader 2020 allows a perpetrator to execute arbitrary code.	20 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Acrobat Reader PDF file viewing and editing program lies in the ability to read beyond the allowed range when analyzing the created file, allowing a perpetrator to execute arbitrary code.	7 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of PDF viewing and editing programs such as Acrobat DC, Acrobat Reader DC, Acrobat 2024, Acrobat 2020, and Acrobat Reader 2020 are related to the use of memory after it is freed. This allows attackers to execute arbitrary code.	14 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the CoolType font processing framework in Acrobat Reader software, which is used for viewing and editing PDF files, allows a perpetrator to disclose protected information.	15 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Acrobat Reader PDF viewing and editing software lies in the ability to write outside the buffer, allowing an attacker to execute arbitrary code.	15 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Acrobat Reader PDF viewing and editing software is related to synchronization errors when using a common resource, allowing attackers to escalate their privileges.	15 Nov 202400:00	–	bdu_fstec

Source	Link
helpx	www.helpx.adobe.com/security/products/acrobat/apsb24-57.html

14 Aug 2024 12:52Current

7.8High risk

Vulners AI Score7.8

CVSS 3.17.8

EPSS0.04493

SSVC

Adobe Acrobat Acrobat Reader vulnerabilities fixed arbitrary code execution rogue file updates released