Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 28/03/2022. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| acrobat | ≥ 10.0, < 10.1.7≥ 11.0, < 11.0.03≥ 9.0, < 9.5.5 | 10.1.711.0.039.5.5 |
| acrobat reader | ≥ 10.0, < 10.1.7≥ 11.0, < 11.0.03≥ 9.0, < 9.5.5 | 10.1.711.0.039.5.5 |
Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-2727.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free