Adobe Acrobat and Reader Use-After-Free Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 08/06/2022. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| acrobat | ≥ 8.0, < 8.2≥ 9.0, < 9.3 | 8.29.3 |
| acrobat reader | ≥ 8.0, < 8.2≥ 9.0, < 9.3 | 8.29.3 |
| linux enterprise debuginfo | = 11 |
Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free