PT-2024-6350 · Adobe · Acrobat Reader

Published

2024-09-10

·

Updated

2024-11-06

·

CVE-2024-41869

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier
Description The issue is related to a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction, where a victim must open a malicious file. The vulnerability allows a remote attacker to compromise a vulnerable system.
Recommendations For Adobe Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier, update to the latest version to fix the vulnerability. As a temporary workaround, consider avoiding the use of Adobe Acrobat Reader to open PDF files from untrusted sources until a patch is applied.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2024-07388
CVE-2024-41869

Affected Products

Acrobat Reader