Skip to content
OpenAdvisories
Medium · 6.1 CVE-2021-39845 EUVD-2021-26202GHSA-34pq-rp73-p94p

Adobe Acrobat Reader Page Tree Node Recursive Stack Overflow

Published Sep 29, 2021 · Updated Sep 17, 2024 · Assigned by adobe

Description

Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a stack overflow vulnerability due to insecure handling of a crafted PDF file, potentially resulting in memory corruption in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted PDF file in Acrobat Reader.

Affected products

VendorProductAffectedFixed
Adobe Acrobat Reader unspecified – ≤ 2020.004.30006, unspecified – ≤ 2017.011.30199, unspecified – ≤ 2021.005.20060, unspecified – ≤ None —

References