Skip to content
OpenAdvisories
Medium WID-SEC-2024-1354 2 CVEs

Adobe Acrobat Android: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen

Published Jun 11, 2024 · Updated Jun 11, 2024 · de-DE

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Adobe Acrobat Android ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

Product

Adobe Acrobat ist ein Programm für die Erstellung und Betrachtung von Dokumenten im Portable Document Format (PDF).

Vulnerabilities 2

  • High 7.5

    Acrobat Android : OverSecured Finding : Overwriting arbitrary files via attacker-controlled output file paths

    Acrobat Mobile Sign Android versions 24.4.2.33155 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a security feature bypass. An attacker could exploit this vulner…

  • Medium 5.5

    Acrobat Android : OverSecured Finding : Access to arbitrary* content providers via insecure Intent configuration

    Acrobat Mobile Sign Android versions 24.4.2.33155 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could exploit this vulnerability to access confidential information. Exploitatio…

Revision history

  1. #1

    Initiale Fassung

References