CVE-2020-24436
Acrobat Pro DC PDF Export Out-Of-Bounds Write Vulnerability Could Lead to Arbitrary Code Execution
Vexday Risk Score
26Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 7.8EPSS 16.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
05 nov 2020Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
Acrobat Pro DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by an out-of-bounds write vulnerability that could result in writing past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. This vulnerability requires user interaction to exploit in that the victim must open a malicious document.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
Adobe · Acrobat ReaderQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →