Abdulaziz Hariri

**Name of the Vulnerable Software and Affected Versions** Adobe Acrobat and Reader versions 2018.011.20038 and earlier Adobe Acrobat and Reader versions 2017.011.30079 and earlier Adobe Acrobat and Reader versions 2015.006.30417 and earlier **Description** The issue is related to a security bypass that could lead to information disclosure. Successful exploitation of this issue could allow attackers to obtain sensitive information. **Recommendations** For Adobe Acrobat and Reader versions 2018.011.20038 and earlier, update to a version later than 2018.011.20038 to resolve the issue. For Adobe Acrobat and Reader versions 2017.011.30079 and earlier, update to a version later than 2017.011.30079 to resolve the issue. For Adobe Acrobat and Reader versions 2015.006.30417 and earlier, update to a version later than 2015.006.30417 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Adobe Acrobat Reader versions 11.0.19 and earlier Adobe Acrobat Reader versions 15.006.30280 and earlier Adobe Acrobat Reader versions 15.023.20070 and earlier **Description** The issue is related to a heap buffer overflow vulnerability in image conversion, specifically when parsing offsets in TIFF files. This could lead to arbitrary code execution if successfully exploited. The vulnerability is caused by an out-of-bounds operation in memory due to the parsing of TIFF files, which can allow a remote attacker to execute arbitrary code. **Recommendations** For Adobe Acrobat Reader versions 11.0.19 and earlier, update to a version later than 11.0.19 to resolve the issue. For Adobe Acrobat Reader versions 15.006.30280 and earlier, update to a version later than 15.006.30280 to resolve the issue. For Adobe Acrobat Reader versions 15.023.20070 and earlier, update to a version later than 15.023.20070 to resolve the issue. As a temporary workaround, consider disabling the image conversion feature for TIFF files until a patch is available. Restrict access to TIFF files to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Adobe Reader versions (affected versions not specified) Adobe Acrobat versions (affected versions not specified) **Description** The issue is caused by a buffer overflow in Adobe Reader and Adobe Acrobat, allowing a remote attacker to execute arbitrary code or cause a denial of service (memory corruption). **Recommendations** For Adobe Reader, update to a version that fixes the buffer overflow issue. For Adobe Acrobat, update to a version that fixes the buffer overflow issue. As a temporary workaround, consider restricting access to PDF files from untrusted sources until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Adobe Reader versions (affected versions not specified) Adobe Acrobat versions (affected versions not specified) **Description** The issue is caused by a buffer overflow in Adobe Reader and Adobe Acrobat, allowing a remote attacker to execute arbitrary code or cause a denial of service (memory corruption). **Recommendations** For Adobe Reader, update to a version that contains a fix for this issue. For Adobe Acrobat, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Adobe Reader versions (affected versions not specified) Adobe Acrobat versions (affected versions not specified) **Description** The issue is caused by a buffer overflow in Adobe Reader and Adobe Acrobat, allowing a remote attacker to execute arbitrary code or cause a denial of service (memory corruption). **Recommendations** For Adobe Reader, update to a version that contains a fix for this issue. For Adobe Acrobat, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Adobe Reader versions (affected versions not specified) Adobe Acrobat versions (affected versions not specified) **Description** The issue is caused by a buffer overflow, allowing a remote attacker to execute arbitrary code or cause a denial of service (memory corruption). A memory corruption vulnerability in Adobe Acrobat and Reader enables attackers to execute code. **Recommendations** For Adobe Reader, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Adobe Acrobat, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Adobe Reader versions (affected versions not specified) Adobe Acrobat versions (affected versions not specified) **Description** The issue is related to a use-after-free vulnerability in Adobe Reader and Adobe Acrobat. This vulnerability can be exploited by a remote attacker to execute arbitrary code. The vulnerability is associated with the use of memory after it has been freed. **Recommendations** For Adobe Reader, update to a version that addresses the use-after-free vulnerability. For Adobe Acrobat, update to a version that addresses the use-after-free vulnerability. As a temporary workaround, consider restricting access to PDF files from untrusted sources until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Adobe Reader versions (affected versions not specified) Adobe Acrobat versions (affected versions not specified) **Description** The issue is related to a use-after-free vulnerability in Adobe Reader and Adobe Acrobat, which can be exploited by a remote attacker to execute arbitrary code. This vulnerability is associated with the misuse of memory after it has been freed. **Recommendations** For Adobe Reader, update to a version that includes a fix for this issue. For Adobe Acrobat, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting the use of the ExtendScript ScriptProxy feature in Adobe Reader DC until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Adobe Reader versions (affected versions not specified) Adobe Acrobat versions (affected versions not specified) **Description** The issue is related to a use-after-free vulnerability in the memory usage of Adobe Reader and Adobe Acrobat. This vulnerability can be exploited by a remote attacker to execute arbitrary code. **Recommendations** For Adobe Reader, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Adobe Acrobat, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Adobe Reader versions (affected versions not specified) Adobe Reader Document Cloud versions (affected versions not specified) Adobe Acrobat Document Cloud versions (affected versions not specified) Adobe Acrobat versions (affected versions not specified) **Description** The issue is related to a use-after-free vulnerability, which occurs when memory is accessed after it has been freed. This can allow a remote attacker to execute arbitrary code. The vulnerability is associated with the use of memory after it has been released, potentially enabling code execution. **Recommendations** For Adobe Reader, update to a version that addresses the use-after-free vulnerability. For Adobe Reader Document Cloud, update to a version that addresses the use-after-free vulnerability. For Adobe Acrobat Document Cloud, update to a version that addresses the use-after-free vulnerability. For Adobe Acrobat, update to a version that addresses the use-after-free vulnerability. As a temporary workaround, consider restricting access to PDF files from untrusted sources until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Adobe Reader versions (affected versions not specified) Adobe Acrobat versions (affected versions not specified) **Description** The issue is caused by a buffer overflow, allowing a remote attacker to execute arbitrary code or cause a denial of service (memory corruption). A memory corruption vulnerability in Adobe Acrobat and Reader enables attackers to execute code. The vulnerability is also related to an out-of-bounds read information disclosure in Adobe Acrobat Pro DC, specifically in the TIFF TAGTYPE parsing during image conversion. **Recommendations** For Adobe Reader, update to a version that contains a fix for this issue. For Adobe Acrobat, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting the use of the TIFF image conversion feature in Adobe Acrobat Pro DC until a patch is available. Avoid using Adobe Acrobat and Reader to open untrusted PDF files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Adobe Reader versions (affected versions not specified) Adobe Acrobat versions (affected versions not specified) **Description** The issue is related to a use-after-free vulnerability in Adobe Reader and Adobe Acrobat. This vulnerability can be exploited by a remote attacker to execute arbitrary code. The vulnerability is associated with the use of memory after it has been freed. **Recommendations** For Adobe Reader, update to a version that contains a fix for this issue. For Adobe Acrobat, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting access to PDF files from untrusted sources until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Adobe Reader versions (affected versions not specified) Adobe Acrobat versions (affected versions not specified) **Description** The issue is related to a use-after-free vulnerability in Adobe Reader and Adobe Acrobat. This vulnerability can be exploited by a remote attacker to execute arbitrary code. The vulnerability is associated with the use of memory after it has been freed. **Recommendations** For Adobe Reader, update to a version that includes a fix for this issue. For Adobe Acrobat, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting access to PDF files from untrusted sources until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Adobe Reader versions (affected versions not specified) Adobe Acrobat versions (affected versions not specified) **Description** The issue is related to a use-after-free vulnerability, which occurs when memory is accessed after it has been freed. This can allow a remote attacker to execute arbitrary code. **Recommendations** For Adobe Reader, consider disabling the ToolEventHandler function as a temporary workaround until a patch is available. For Adobe Acrobat, restrict access to vulnerable modules to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Adobe Reader versions (affected versions not specified) Adobe Acrobat versions (affected versions not specified) **Description** The issue is related to a use-after-free vulnerability, which occurs when memory is used after it has been freed. This can allow a remote attacker to execute arbitrary code. The vulnerability is associated with the use of memory after it has been released, potentially enabling an attacker to perform remote code execution. **Recommendations** For Adobe Reader, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Adobe Acrobat, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Adobe Reader versions (affected versions not specified) Adobe Acrobat versions (affected versions not specified) **Description** The issue is related to a use-after-free vulnerability, which occurs when memory is accessed after it has been freed. This can allow a remote attacker to execute arbitrary code. **Recommendations** For Adobe Reader, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Adobe Acrobat, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Adobe Reader versions (affected versions not specified) Adobe Acrobat versions (affected versions not specified) **Description** The issue is related to a use-after-free vulnerability in the memory usage of Adobe Reader and Adobe Acrobat. This vulnerability can be exploited by a remote attacker to execute arbitrary code. **Recommendations** For Adobe Reader, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Adobe Acrobat, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Adobe Reader versions (affected versions not specified) Adobe Acrobat versions (affected versions not specified) **Description** The issue is related to a use-after-free vulnerability in Adobe Reader and Adobe Acrobat. This vulnerability can be exploited by a remote attacker to execute arbitrary code. The vulnerability is associated with the use of memory after it has been freed. **Recommendations** For Adobe Reader, update to a version that contains a fix for this issue. For Adobe Acrobat, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting the use of Adobe Reader and Adobe Acrobat until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Adobe Reader versions (affected versions not specified) Adobe Acrobat versions (affected versions not specified) **Description** The issue is related to a use-after-free vulnerability, which occurs when memory is accessed after it has been freed. This can allow a remote attacker to execute arbitrary code. **Recommendations** For Adobe Reader, update to a version that includes a fix for this issue. For Adobe Acrobat, update to a version that includes a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Adobe Reader versions (affected versions not specified) Adobe Acrobat versions (affected versions not specified) **Description** The issue is related to a use-after-free vulnerability, which occurs when memory is accessed after it has been freed. This can allow a remote attacker to execute arbitrary code. **Recommendations** For Adobe Reader, update to a version that includes a fix for this issue. For Adobe Acrobat, update to a version that includes a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.