| Package | Affected versions | Patched versions |
|---|---|---|
| acrobat | ≥ 17.011.30059, ≤ 17.012.30205≥ 20.001.30005, ≤ 20.005.30311≥ 20.001.30005, ≤ 20.005.30314 | |
| acrobat dc | ≥ 15.008.20082, ≤ 22.001.20085 | |
| acrobat reader | ≥ 17.011.30059, ≤ 17.012.30205≥ 20.001.30005, ≤ 20.005.30311≥ 20.001.30005, ≤ 20.005.30314 | |
| acrobat reader dc | ≥ 15.008.20082, ≤ 22.001.20085 |
Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) is affected by the use of a variable that has not been initialized when processing of embedded fonts, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted .pdf file
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free