Adobe Acrobat Reader DC OTF Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Published Jan 14, 2022
7.8
HIGHCVSS 3.1
EPSS 8.37%
Description
Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected products
-
Affected
- ≥ unspecified, ≤ 17.011.30204
- ≥ unspecified, ≤ 20.004.30017
- ≥ unspecified, ≤ 21.007.20099
- ≥ unspecified, ≤ None
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| Adobe | Acrobat Reader | unknown | Affected
|
Configuration 1
- ≥ 15.008.20082 · ≤ 21.007.20099
- ≥ 15.008.20082 · ≤ 21.007.20099
Configuration 2
- ≥ 17.011.30059 · ≤ 17.011.30204
- ≥ 20.001.30005 · ≤ 20.004.30017
- ≥ 17.011.30059 · ≤ 17.011.30204
- ≥ 20.001.30005 · ≤ 20.004.30017
Configuration 3
- ≥ 15.008.20082 · ≤ 21.007.20099
- ≥ 15.008.20082 · ≤ 21.007.20099
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (3)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-31523 Advisory
- https://helpx.adobe.com/security/products/acrobat/apsb22-01.html x_refsource_MISCVendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-22-539/ x_refsource_MISCThird Party AdvisoryVDB Entry
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-31523 | Advisory | |
| https://helpx.adobe.com/security/products/acrobat/apsb22-01.html | x_refsource_MISCVendor Advisory | |
| https://www.zerodayinitiative.com/advisories/ZDI-22-539/ | x_refsource_MISCThird Party AdvisoryVDB Entry |
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
No data
Red Hat
No data
GitHub
No data