Adobe Acrobat Reader DC Font Parsing Memory Corruption Remote Code Execution Vulnerability

🗓️ 27 Nov 2023 00:00:00Reported by Mat Powell of Trend Micro Zero Day InitiativeType

zdi🔗 www.zerodayinitiative.com👁 19 Views

Adobe Acrobat Reader DC Font Parsing Memory Corruption Remote Code Execution Vulnerability. Allows remote attackers to execute arbitrary code. Requires user interaction to exploit the vulnerability by visiting a malicious page or opening a malicious file. Flaw exists within parsing of embedded fonts due to lack of proper validation of user-supplied data, resulting in memory corruption. Attackers can leverage this to execute code in the current process.

Reporter	Title	Published	Views	Family All 56
Tenable Nessus	Adobe Acrobat < 20.005.30539 / 23.006.20380 Multiple Vulnerabilities (APSB23-54)	14 Nov 202300:00	–	nessus
Tenable Nessus	Adobe Reader < 20.005.30539 / 23.006.20380 Multiple Vulnerabilities (APSB23-54)	14 Nov 202300:00	–	nessus
Tenable Nessus	Adobe Acrobat < 20.005.30539 / 23.006.20380 Multiple Vulnerabilities (APSB23-54) (macOS)	14 Nov 202300:00	–	nessus
Tenable Nessus	Adobe Reader < 20.005.30539 / 23.006.20380 Multiple Vulnerabilities (APSB23-54) (macOS)	14 Nov 202300:00	–	nessus
CNNVD	Adobe Acrobat Reader 安全漏洞	16 Nov 202300:00	–	cnnvd
CNVD	Unspecified Vulnerability in Adobe Acrobat Reader (CNVD-2025-16215)	20 Nov 202300:00	–	cnvd
CVE	CVE-2023-44371	16 Nov 202309:52	–	cve
Cvelist	CVE-2023-44371 ZDI-CAN-21998: Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability	16 Nov 202309:52	–	cvelist
EUVD	EUVD-2023-48725	3 Oct 202520:07	–	euvd
Kaspersky	KLA61972 Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader	14 Nov 202300:00	–	kaspersky