Input validation

2024-02-1513:15:00

PRIOn knowledge base

www.prio-n.com

acrobat reader

input validation

vulnerability

denial of service

user interaction

malicious file

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.5%

JSON

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an Improper Input Validation vulnerability that could lead to an application denial-of-service. An attacker could leverage this vulnerability to cause the application to crash, resulting in a denial of service. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CPENameOperatorVersion
acrobatge20.001.30005
acrobatlt20.005.30574
acrobat_dcge15.008.20082
acrobat_dclt23.008.20533
acrobat_readerge20.001.30005
acrobat_readerlt20.005.30574
acrobat_reader_dcge15.008.20082
acrobat_reader_dclt23.008.20533

Name	Operator	Version
acrobat	ge	20.001.30005
acrobat	lt	20.005.30574
acrobat_dc	ge	15.008.20082
acrobat_dc	lt	23.008.20533
acrobat_reader	ge	20.001.30005
acrobat_reader	lt	20.005.30574
acrobat_reader_dc	ge	15.008.20082
acrobat_reader_dc	lt	23.008.20533