CVE-2020-24435

Published: Nov 5, 2020Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a heap-based buffer overflow vulnerability in the submitForm function, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted .pdf file in Acrobat Reader.

Affected (6)

Products: Adobe: Acrobat, Acrobat Dc, Acrobat Reader, Acrobat Reader Dc

4 products

Configuration A

6 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Adobe Acrobat	Up to 20.001.30005
Adobe Acrobat Dc	Up to 17.011.30175
Adobe Acrobat Dc	Up to 20.012.20048
Adobe Acrobat Reader	Up to 20.001.30005
Adobe Acrobat Reader Dc	Up to 17.011.30175
Adobe Acrobat Reader Dc	Up to 20.012.20048