Multiple Vulnerabilities in Adobe Acrobat and Adobe Reader Could Allow for Arbitrary Code Execution (APSB20-67)

MS-ISAC ADVISORY NUMBER:


2020-150

DATE(S) ISSUED:


11/03/2020

OVERVIEW:


Multiple vulnerabilities have been discovered in Adobe Acrobat and Adobe Reader, the most severe of which could allow for arbitrary code execution. Adobe Acrobat is a family of software developed by Adobe Inc. to view, create, manipulate, print, and manage files in PDF format. Adobe Reader is the free version within the Adobe Acrobat family of software. Successful exploitation of the most severe of these vulnerabilities could result in arbitrary code execution. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. If this application has been configured to have fewer user rights on the system, exploitation of the most severe of these vulnerabilities could have less impact than if it was configured with administrative rights.


THREAT INTELLIGENCE:


There are no reports of these vulnerabilities being exploited in the wild.


SYSTEMS AFFECTED:


  • Acrobat DC (Continuous track) for Windows & macOS version 2020.012.20048 and earlier versions

  • Acrobat Reader DC (Continuous track) for Windows & macOS version 2020.012.20048 and earlier versions

  • Acrobat 2020 (Classic 2020) for Windows & macOS version 2020.001.30005 and earlier versions

  • Acrobat Reader 2020 (Classic 2020) for Windows & macOS version 2020.001.30005 and earlier versions

  • Acrobat 2017 (Classic 2017 track) for Windows & macOS version 2017.011.30175 and earlier versions

  • Acrobat Reader 2017 (Classic 2017 track) for Windows & macOS version 2017.011.30175 and earlier versions

  • RISK:




    Government:
  • Large and medium government entities: HIGH

  • Small government entities: MEDIUM

  • Businesses:
  • Large and medium business entities: HIGH

  • Small business entities: MEDIUM

  • Home Users:
    LOW

    TECHNICAL SUMMARY:


    Multiple vulnerabilities have been discovered in Adobe Acrobat and Adobe Reader, the most ..

    Support the originator by clicking the read the rest link below.