| Package | Affected versions | Patched versions |
|---|---|---|
| acrobat | ≥ 17.011.30059, < 17.012.30227≥ 17.011.30059, < 17.012.30229≥ 20.001.30002, < 20.005.30331≥ 20.001.30002, < 20.005.30334 | 17.012.3022717.012.3022920.005.3033120.005.30334 |
| acrobat dc | ≥ 22.001.20085, < 22.001.20112≥ 22.001.20085, < 22.001.20117 | 22.001.2011222.001.20117 |
| acrobat reader | ≥ 17.011.30059, < 17.012.30227≥ 17.011.30059, < 17.012.30229≥ 20.001.30002, < 20.005.30331≥ 20.001.30002, < 20.005.30334 | 17.012.3022717.012.3022920.005.3033120.005.30334 |
| acrobat reader dc | ≥ 22.001.20085, < 22.001.20112≥ 22.001.20085, < 22.001.20117 | 22.001.2011222.001.20117 |
Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free