PT-2024-3497 · Adobe · Acrobat Reader
Published
2024-05-14
·
Updated
2024-12-02
·
CVE-2024-34101
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Adobe Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier
Description
The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Recommendations
For Adobe Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier, consider disabling the ability to open PDF files from untrusted sources until a patch is available. Restrict access to sensitive information and avoid using the affected software to open potentially malicious files. As a temporary workaround, consider implementing additional security measures to prevent the exploitation of this vulnerability, such as restricting user privileges and monitoring system activity for signs of malicious behavior. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Acrobat Reader