PT-2023-6436 · Adobe · Acrobat+3
CVE-2023-26419
·
Publicado
2023-04-11
·
Atualizado
2023-04-21
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Adobe Acrobat versions prior to 23.001.20094
Adobe Acrobat Reader versions 23.001.20093 and earlier
Adobe Acrobat 2020 versions prior to 20.005.30442
Adobe Acrobat Reader 2020 versions 20.005.30441 and earlier
Description
The issue is related to a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction, where a victim must open a malicious file. This vulnerability is associated with the use of memory after it has been freed.
Recommendations
For Adobe Acrobat versions prior to 23.001.20094, update to version 23.001.20094 or later.
For Adobe Acrobat Reader versions 23.001.20093 and earlier, update to version 23.001.20094 or later.
For Adobe Acrobat 2020 versions prior to 20.005.30442, update to version 20.005.30442 or later.
For Adobe Acrobat Reader 2020 versions 20.005.30441 and earlier, update to version 20.005.30442 or later.
As a temporary workaround, consider avoiding the use of AcroForm removeField until a patch is available.
Correção
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Acrobat
Acrobat 2020
Acrobat Reader
Acrobat Reader 2020