Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 25/03/2022. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| acrobat reader | ≥ 7.0, < 7.1.1≥ 8.0, < 8.1.3≥ 9.0, < 9.1 | 7.1.18.1.39.1 |
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab object, a different vulnerability than CVE-2009-0658.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free