CVE-2020-24432

MEDIUM

6.7

Descripcion

Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) and Adobe Acrobat Pro DC 2017.011.30175 (and earlier) are affected by an improper input validation vulnerability that could result in arbitrary JavaScript execution in the context of the current user. To exploit this issue, an attacker must acquire and then modify a certified PDF document that is trusted by the victim. The attacker then needs to convince the victim to open the document.

Detalles CVE

Puntuacion CVSS v3.16.7

SeveridadMEDIUM

Vector CVSSCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Vector de ataqueLOCAL

ComplejidadHIGH

Privilegios requeridosLOW

Interaccion usuarioREQUIRED

Publicado11/5/2020

Ultima modificacion11/21/2024

Fuentenvd

Avistamientos honeypot0

Productos afectados

adobe:acrobatadobe:acrobat_dcadobe:acrobat_readeradobe:acrobat_reader_dcapple:macosmicrosoft:windows

Debilidades (CWE)

CWE-20

Referencias

https://helpx.adobe.com/security/products/acrobat/apsb20-67.html(psirt@adobe.com)

https://helpx.adobe.com/security/products/acrobat/apsb20-67.html(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.