Skip to content
OpenAdvisories
High NCSC-2024-0482 6 CVEs

Kwetsbaarheden verholpen in Adobe Acrobat Reader

Published Dec 11, 2024 · Updated Dec 11, 2024 · nl

Vendor: Adobe Product: Acrobat 2024 Product: Acrobat DC Product: Acrobat Reader Product: Acrobat Reader DC Product: acrobat_2020 Product: acrobat_reader_2020

Summary

Adobe heeft meerdere kwetsbaarheden verholpen in Acrobat Reader (inclusief versies tot en met 24.005.20307).

Details

Interpretaties
De kwetsbaarheden omvatten een Use After Free-kwetsbaarheid die kan leiden tot willekeurige code-uitvoering en Denial-of-Service. Alle kwetsbaarheden vereisen gebruikersinteractie voor exploitatie, wat betekent dat een gebruiker een kwaadwillig vervaardigd bestand moet openen.

Oplossingen
Adobe heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Vulnerabilities 6

  • High 7.8
    CVE-2024-49530

    Acrobat Reader | Use After Free (CWE-416)

    Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issu…

    Adobe Acrobat Reader
  • Medium 6.3
    CVE-2024-49535

    Acrobat Reader | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)

    Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that allows an attacker to provide malicious XML input cont…

    Adobe Acrobat Reader
  • Medium 5.5
    CVE-2024-49531

    Acrobat Reader | NULL Pointer Dereference (CWE-476)

    Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerabili…

    Adobe Acrobat Reader
  • Medium 5.5
    CVE-2024-49532

    Acrobat Reader | Out-of-bounds Read (CWE-125)

    Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to by…

    Adobe Acrobat Reader
  • Medium 5.5
    CVE-2024-49533

    Acrobat Reader | Out-of-bounds Read (CWE-125)

    Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to by…

    Adobe Acrobat Reader
  • Medium 5.5
    CVE-2024-49534

    Acrobat Reader | Out-of-bounds Read (CWE-125)

    Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to by…

    Adobe Acrobat Reader

Revision history

  1. #0

    Initiele versie

References