Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q3vc-h49w-254q

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) for macOS are affected by a time-of-check time-of-use (TOCTOU) race condition vulnerability that could result in local privilege escalation. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) for macOS are affected by a time-of-check time-of-use (TOCTOU) race condition vulnerability that could result in local privilege escalation. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

EPSS

Процентиль: 79%
0.01248
Низкий

Дефекты

CWE-367

Связанные уязвимости

CVSS3: 7.7
nvd
больше 5 лет назад

Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) for macOS are affected by a time-of-check time-of-use (TOCTOU) race condition vulnerability that could result in local privilege escalation. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS3: 8.3
fstec
больше 5 лет назад

Уязвимость программ просмотра PDF-файлов Adobe Reader Document Cloud, Adobe Reader и программ редактирования PDF-файлов Adobe Acrobat Document Cloud, Adobe Acrobat, вызванная «ситуацией гонки», позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 79%
0.01248
Низкий

Дефекты

CWE-367