Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are missing support for an integrity check. An unauthenticated attacker would have the ability to completely manipulate data in a certified PDF without invalidating the original certification. Exploitation of this issue requires user interaction in that a victim must open the tampered file.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:NAdobe Acrobat
APPAdobe17.011.30059 – 17.011.3018820.001.30005 – 20.001.30018Adobe Acrobat DC
APPAdobe15.008.20082 – 20.013.20074Adobe Acrobat Reader
APPAdobe17.011.30059 – 17.011.3018820.001.30005 – 20.001.30018Adobe Acrobat Reader Dc
APPAdobe15.008.20082 – 20.013.20074Apple macOS
OSApplewszystkie wersjeMicrosoft Windows
OSMicrosoftwszystkie wersje
Related vulnerabilities
Atak na łańcuch dostaw DAEMON Tools Lite — trojanizacja instalatorów
Type confusion w V8 (Google Chrome) — zdalne uszkodzenie sterty
Apple iOS/iPadOS/macOS — out-of-bounds write przy przetwarzaniu obrazu
Commvault Command Center – nieuwierzytelniony RCE przez path traversal w ZIP
Apple — memory corruption (RCE) w przetwarzaniu strumieni audio