CVE-2022-27792
published 2022-05-11CVE-2022-27792: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write…
high7.8CVSS 3.0
AVLACLPRNUIRSUCHIHAH
Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | acrobat | 17.011.30059 – 17.012.30205 | — |
| adobe | acrobat | 20.001.30005 – 20.005.30314 | — |
| adobe | acrobat | 20.001.30005 – 20.005.30311 | — |
| adobe | acrobat_dc | 15.008.20082 – 22.001.20085 | — |
| adobe | acrobat_reader | 17.011.30059 – 17.012.30205 | — |
| adobe | acrobat_reader | 20.001.30005 – 20.005.30314 | — |
| adobe | acrobat_reader | 20.001.30005 – 20.005.30311 | — |
| adobe | acrobat_reader | unspecified – 22.001.20085 | — |
| adobe | acrobat_reader_dc | 15.008.20082 – 22.001.20085 | — |
| artifex | ghostscript | >= 0 < 9.26~dfsg+0-0ubuntu0.18.04.17 | 9.26~dfsg+0-0ubuntu0.18.04.17 |
| artifex | ghostscript | >= 0 < 9.50~dfsg-5ubuntu4.6 | 9.50~dfsg-5ubuntu4.6 |
| artifex | ghostscript | >= 0 < 9.55.0~dfsg1-0ubuntu5.1 | 9.55.0~dfsg1-0ubuntu5.1 |
CVSS provenance
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv7.1HIGH