PT-2023-7150 · Adobe · Acrobat Reader
Publicado
2023-11-14
·
Atualizado
2023-12-04
·
CVE-2023-44348
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Adobe Acrobat Reader versions 23.006.20360 and earlier
Adobe Acrobat Reader versions 20.005.30524 and earlier
Description
The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. This vulnerability can be leveraged by an attacker to bypass mitigations such as ASLR. Exploitation requires user interaction, where a victim must open a malicious file, allowing the attacker to potentially access confidential information.
Recommendations
For Adobe Acrobat Reader versions 23.006.20360 and earlier, update to a version later than 23.006.20360 to resolve the issue.
For Adobe Acrobat Reader versions 20.005.30524 and earlier, update to a version later than 20.005.30524 to resolve the issue.
As a temporary workaround, consider avoiding the use of Adobe Acrobat Reader to open files from untrusted sources until a patch is available.
Correção
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Acrobat Reader