Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w78x-x84g-24xj

Опубликовано: 10 авг. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an Violation of Secure Design Principles vulnerability that could result in arbitrary code execution in the context of the current user by bypassing the API blacklisting feature. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an Violation of Secure Design Principles vulnerability that could result in arbitrary code execution in the context of the current user by bypassing the API blacklisting feature. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

EPSS

Процентиль: 33%
0.00134
Низкий

7.8 High

CVSS3

Дефекты

CWE-657

Связанные уязвимости

CVSS3: 7.8
nvd
больше 2 лет назад

Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an Violation of Secure Design Principles vulnerability that could result in arbitrary code execution in the context of the current user by bypassing the API blacklisting feature. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS3: 7.8
fstec
больше 2 лет назад

Уязвимость программного интерфейса программы просмотра и редактирования PDF-файлов Acrobat Reader, программы редактирования PDF-файлов Adobe Acrobat , связанная с недостатками контроля доступа, позволяющая нарушителю выполнить произвольный код в контексте текущего пользователя

EPSS

Процентиль: 33%
0.00134
Низкий

7.8 High

CVSS3

Дефекты

CWE-657