CVE-2024-20747

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*
OR cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*
cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*
OR cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

05 Mar 2024, 22:17

Type Values Removed Values Added
First Time Microsoft
Adobe acrobat Dc
Microsoft windows
Adobe
Adobe acrobat
Adobe acrobat Reader Dc
Apple
Adobe acrobat Reader
Apple macos
CPE cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*
cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
References () https://helpx.adobe.com/security/products/acrobat/apsb24-07.html - () https://helpx.adobe.com/security/products/acrobat/apsb24-07.html - Patch, Vendor Advisory
References () https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1908 - () https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1908 - Third Party Advisory

15 Feb 2024, 17:15

Type Values Removed Values Added
References
  • () https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1908 -

15 Feb 2024, 14:28

Type Values Removed Values Added
New CVE

Information

Published : 2024-02-15 13:15

Updated : 2024-03-05 22:17


NVD link : CVE-2024-20747

Mitre link : CVE-2024-20747

CVE.ORG link : CVE-2024-20747


JSON object : View

Products Affected

adobe

  • acrobat_dc
  • acrobat
  • acrobat_reader_dc
  • acrobat_reader

microsoft

  • windows

apple

  • macos
CWE
CWE-125

Out-of-bounds Read