CVE-2020-24430
published 2020-11-05CVE-2020-24430: Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a use-after-free…
high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a use-after-free vulnerability when handling malicious JavaScript. This vulnerability could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a malicious file.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | acrobat | <= 20.001.30005 | — |
| adobe | acrobat_dc | <= 17.011.30175 | — |
| adobe | acrobat_dc | <= 20.012.20048 | — |
| adobe | acrobat_reader | <= 20.001.30005 | — |
| adobe | acrobat_reader | unspecified – 2017.011.30175 | — |
| adobe | acrobat_reader_dc | <= 17.011.30175 | — |
| adobe | acrobat_reader_dc | <= 20.012.20048 | — |
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-11-05
Published