Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-49531

Опубликовано: 10 дек. 2024
Источник: nvd
CVSS3: 5.5
EPSS Низкий

Описание

Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*
Версия от 20.001.30002 (включая) до 20.005.30748 (исключая)
cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*
Версия от 24.001.30159 (включая) до 24.001.30225 (исключая)
cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*
Версия от 15.007.20033 (включая) до 24.005.20320 (исключая)
cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*
Версия от 20.001.30002 (включая) до 20.005.30748 (исключая)
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*
Версия от 15.007.20033 (включая) до 24.005.20320 (исключая)

Одно из

cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 35%
0.00142
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVSS3: 4.7
github
около 1 года назад

Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

EPSS

Процентиль: 35%
0.00142
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-476