PT-2023-6440 · Adobe · Acrobat Reader
CVE-2023-26420
·
Publicado
2023-04-11
·
Atualizado
2023-04-21
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Adobe Acrobat Reader versions 23.001.20093 and earlier
Adobe Acrobat Reader versions 20.005.30441 and earlier
Description
The issue is related to a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction, where a victim must open a malicious file. This vulnerability is associated with the use of memory after it has been freed.
Recommendations
For Adobe Acrobat Reader versions 23.001.20093 and earlier, update to a version later than 23.001.20093 to resolve the issue.
For Adobe Acrobat Reader versions 20.005.30441 and earlier, update to a version later than 20.005.30441 to resolve the issue.
As a temporary workaround, consider avoiding the use of the AcroForm addField function until a patch is available. Restrict access to malicious files to minimize the risk of exploitation.
Correção
Use After Free
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Acrobat Reader