Rewterz Threat Advisory – Adobe Acrobat and Reader Multiple Vulnerabilities

Severity

High

Analysis Summary

CVE-2020-24428

Adobe Acrobat and Adobe Reader could allow a local attacker to gain elevated privileges on the system, caused by a race condition. By persuading a victim to open a specially-crafted document, an attacker could exploit this vulnerability to gain elevated privileges on the system.

CVE-2020-24431

Adobe Acrobat and Adobe Reader could allow a remote attacker to bypass security restrictions, caused by a dynamic library injection. By persuading a victim to open a specially-crafted document, a remote attacker could exploit this vulnerability to bypass access restrictions.

CVE-2020-24429

Adobe Acrobat and Adobe Reader could allow a local attacker to gain elevated privileges on the system, caused by a signature verification bypass. By persuading a victim to open a specially-crafted document, an attacker could exploit this vulnerability to gain elevated privileges on the system.

CVE-2020-24427

Adobe Acrobat and Adobe Reader could allow a remote attacker to obtain sensitive information, caused by improper input validation. By persuading a victim to open a specially-crafted document, a remote attacker could exploit this vulnerability to obtain sensitive information.

Impact

•  Privilege escalation
• Security bypass
• Information disclosure

Affected Vendors

Adobe

Affected Products

Adobe Acrobat and Reader

Remediation

Refer to vendor advisory for the complete list of affected products and their respective patches.

https://helpx.adobe.com/security.html