Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gcwg-xr3q-h23m

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) for macOS are affected by a security feature bypass that could result in dynamic library code injection by the Adobe Reader process. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) for macOS are affected by a security feature bypass that could result in dynamic library code injection by the Adobe Reader process. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

EPSS

Процентиль: 54%
0.00313
Низкий

Дефекты

CWE-285

Связанные уязвимости

CVSS3: 4.4
nvd
больше 5 лет назад

Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) for macOS are affected by a security feature bypass that could result in dynamic library code injection by the Adobe Reader process. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS3: 8.8
fstec
больше 5 лет назад

Уязвимость программ просмотра PDF-файлов Adobe Reader Document Cloud, Adobe Reader и программ редактирования PDF-файлов Adobe Acrobat Document Cloud, Adobe Acrobat, связанная с ошибками процедуры авторизации, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 54%
0.00313
Низкий

Дефекты

CWE-285