PT-2023-6412 · Adobe · Acrobat+3
CVE-2023-26396
·
Publicado
2023-04-11
·
Atualizado
2023-10-11
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Adobe Acrobat versions prior to 23.001.20093
Adobe Acrobat Reader versions prior to 23.001.20093
Adobe Acrobat versions prior to 20.005.30441
Adobe Acrobat Reader versions prior to 20.005.30441
Adobe Acrobat 2020 (affected versions not specified)
Adobe Acrobat Reader 2020 (affected versions not specified)
Adobe Acrobat Document Cloud (affected versions not specified)
Adobe Acrobat Reader Document Cloud (affected versions not specified)
Description
The issue is related to the creation of temporary files in a directory with incorrect permissions, which could result in privilege escalation in the context of the current user. Exploitation of this issue requires user interaction, such as opening a malicious file. This allows an attacker to potentially escalate privileges using a specially crafted file.
Recommendations
For Adobe Acrobat versions prior to 23.001.20093, update to a version later than 23.001.20093.
For Adobe Acrobat Reader versions prior to 23.001.20093, update to a version later than 23.001.20093.
For Adobe Acrobat versions prior to 20.005.30441, update to a version later than 20.005.30441.
For Adobe Acrobat Reader versions prior to 20.005.30441, update to a version later than 20.005.30441.
For Adobe Acrobat 2020, Adobe Acrobat Reader 2020, Adobe Acrobat Document Cloud, and Adobe Acrobat Reader Document Cloud, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Acrobat
Acrobat Document Cloud
Acrobat Reader
Adobe Acrobat Reader Document Cloud