CVE-2022-27792
published 2022-05-11CVE-2022-27792: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write…
PriorityP349high7.8CVSS 3.0
AVLACLPRNUIRSUCHIHAH
EPSS
9.83%
95.0th percentile
Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | acrobat | 17.011.30059 – 17.012.30205 | — |
| adobe | acrobat | 20.001.30005 – 20.005.30314 | — |
| adobe | acrobat | 20.001.30005 – 20.005.30311 | — |
| adobe | acrobat_dc | 15.008.20082 – 22.001.20085 | — |
| adobe | acrobat_reader | 17.011.30059 – 17.012.30205 | — |
| adobe | acrobat_reader | 20.001.30005 – 20.005.30314 | — |
| adobe | acrobat_reader | 20.001.30005 – 20.005.30311 | — |
| adobe | acrobat_reader | unspecified – 22.001.20085 | — |
| adobe | acrobat_reader_dc | 15.008.20082 – 22.001.20085 | — |
| artifex | ghostscript | >= 0 < 9.26~dfsg+0-0ubuntu0.18.04.17 | 9.26~dfsg+0-0ubuntu0.18.04.17 |
| artifex | ghostscript | >= 0 < 9.50~dfsg-5ubuntu4.6 | 9.50~dfsg-5ubuntu4.6 |
| artifex | ghostscript | >= 0 < 9.55.0~dfsg1-0ubuntu5.1 | 9.55.0~dfsg1-0ubuntu5.1 |
CVSS provenance
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
osv7.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
ghostscript vulnerabilities
osv·2022-09-27·CVSS 7.1
CVE-2020-27792 ghostscript vulnerabilities
ghostscript vulnerabilities
It was discovered that GhostScript incorrectly handled certain PDF files.
If a user or automated system were tricked into opening a specially crafted
PDF file, a remote attacker could use this issue to cause GhostScript to
crash, resulting in a denial of service, or possibly execute arbitrary
code. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
(CVE-2020-27792)
It was discovered that GhostScript incorrectly handled certain PDF files.
If a user or automated system were tricked into opening a specially crafted
PDF file, a remote attacker could use this issue to cause GhostScript to
crash, resulting in a denial of service, or possibly execute arbitrary
code. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-2085)
GHSA
GHSA-p7h7-6wj7-3g84: Acrobat Reader DC versions 22
ghsa_unreviewed·2022-05-12
CVE-2022-27792 [HIGH] CWE-787 GHSA-p7h7-6wj7-3g84: Acrobat Reader DC versions 22
Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
No detection rules found.
No public exploits indexed.
2022-05-11
Published