TROYANOSYVIRUS
Zuruck zu CVEs

CVE-2020-24434

LOW
3.3

Beschreibung

Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE Details

CVSS v3.1 Bewertung3.3
SchweregradLOW
CVSS VektorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
AngriffsvektorLOCAL
KomplexitatLOW
Erforderliche PrivilegienNONE
BenutzerinteraktionREQUIRED
Veroffentlicht11/5/2020
Zuletzt geandert11/21/2024
Quellenvd
Honeypot-Sichtungen0

Betroffene Produkte

adobe:acrobatadobe:acrobat_dcadobe:acrobat_readeradobe:acrobat_reader_dcapple:macosmicrosoft:windows

Schwachen (CWE)

CWE-125

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.