CVE-2021-44708
published 2022-01-14CVE-2021-44708: Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a heap overflow vulnerability…
high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a heap overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | acrobat | 17.011.30059 – 17.011.30204 | — |
| adobe | acrobat | 20.001.30005 – 20.004.30017 | — |
| adobe | acrobat_dc | 15.008.20082 – 21.007.20099 | — |
| adobe | acrobat_reader | 17.011.30059 – 17.011.30204 | — |
| adobe | acrobat_reader | 20.001.30005 – 20.004.30017 | — |
| adobe | acrobat_reader | unspecified – 21.007.20099 | — |
| adobe | acrobat_reader_dc | 15.008.20082 – 21.007.20099 | — |