Skip to content
OpenAdvisories
Medium · 6.1 CVE-2021-39846 EUVD-2021-26203GHSA-rxcq-r82r-9c47

Adobe Acrobat Reader /Parent Property Recursive Stack Overflow

Published Sep 29, 2021 · Updated Sep 16, 2024 · Assigned by adobe

Description

Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a stack overflow vulnerability due to insecure handling of a crafted PDF file, potentially resulting in memory corruption in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted PDF file in Acrobat Reader.

Affected products

VendorProductAffectedFixed
Adobe Acrobat Reader unspecified – ≤ 2020.004.30006, unspecified – ≤ 2017.011.30199, unspecified – ≤ 2021.005.20060, unspecified – ≤ None —

References