PT-2023-1120 · Adobe · Acrobat Reader

Publicado

2023-01-10

·

Atualizado

2024-12-19

·

CVE-2023-21586

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier)
Description The issue is related to a NULL Pointer Dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction, as a victim must open a malicious file.
Recommendations For Adobe Acrobat Reader versions 22.003.20282 and earlier, update to a newer version to mitigate the risk. For Adobe Acrobat Reader versions 22.003.20281 and earlier, update to a newer version to mitigate the risk. For Adobe Acrobat Reader versions 20.005.30418 and earlier, update to a newer version to mitigate the risk. As a temporary workaround, consider avoiding the opening of malicious files until a patch is available.

Correção

DoS

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

BDU:2023-00320
CVE-2023-21586

Produtos afetados

Acrobat Reader