Design/Logic Flaw

2024-02-1513:15:00

PRIOn knowledge base

www.prio-n.com

acrobat reader

use after free

vulnerability

arbitrary code execution

user interaction

malicious file

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.4%

JSON

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CPENameOperatorVersion
acrobatge20.001.30005
acrobatlt20.005.30574
acrobat_dcge15.008.20082
acrobat_dclt23.008.20533
acrobat_readerge20.001.30005
acrobat_readerlt20.005.30574
acrobat_reader_dcge15.008.20082
acrobat_reader_dclt23.008.20533

Name	Operator	Version
acrobat	ge	20.001.30005
acrobat	lt	20.005.30574
acrobat_dc	ge	15.008.20082
acrobat_dc	lt	23.008.20533
acrobat_reader	ge	20.001.30005
acrobat_reader	lt	20.005.30574
acrobat_reader_dc	ge	15.008.20082
acrobat_reader_dc	lt	23.008.20533