Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Adobe Acrobat Reader, Adobe Acrobat, Adobe Acrobat Reader DC und Adobe Acrobat DC ausnutzen, um beliebigen Programmcode auszuführen.
Product
Adobe Reader ist ein Programm für die Anzeige von Dokumenten im Portable Document Format (PDF).
Adobe Acrobat ist ein Programm für die Erstellung und Betrachtung von Dokumenten im Portable Document Format (PDF).
Vulnerabilities 2
-
High 7.8
Acrobat Reader | Use After Free (CWE-416)
Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use…
-
High 7.8
Acrobat Reader | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)
Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by a Type Confusion vulnerability that could result in arbitrary code execution in the context of the current user. This issue occurs when a resource is ac…
Revision history
-
#2
PoC für CVE-2024-41869 verfügbar
-
#1
Initiale Fassung
References
-
Adobe Security Bulletin APSB24-70 vom 2024-09-10
https://helpx.adobe.com/security/products/acrobat/apsb24-70.html
-
Bleeping Computer vom 2024-09-12
https://www.bleepingcomputer.com/news/security/adobe-fixes-acrobat-reader-zero-day-with-public-poc-exploit/