CVE-2020-9694

Description

Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
6.479

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities fixed in Adobe Acrobat Reader DC (Continuous Track) update - All languages (20.012.20041) (APSB20-48)Windows
Multiple vulnerabilities fixed in Adobe Acrobat Reader MUI DC (Continuous Track) update - All languages (20.012.20041) (APSB20-48)Windows
Multiple vulnerabilities fixed in Adobe Acrobat DC Pro and Standard (Continuous Track) update - All languages (20.012.20041) (APSB20-48)Windows
Multiple vulnerabilities fixed in Adobe Acrobat 2017 Pro and Standard (Acrobat 2017 Track) update - All languages (17.011.30175) (APSB20-48)Windows
Multiple vulnerabilities fixed in Adobe Acrobat Reader 2017 MUI (Classic Track) (17.011.30175) (APSB20-48)Windows
Multiple vulnerabilities fixed in Adobe Acrobat DC Pro and Standard (Classic Track) update - All languages (15.006.30527) (APSB20-48)Windows
Multiple vulnerabilities fixed in Adobe Acrobat Reader MUI DC (Classic Track) update - All languages (15.006.30527) (APSB20-48)Windows
Multiple vulnerabilities fixed in Adobe Acrobat Reader 2020 MUI (Classic Track) (20.001.30005)Windows
Multiple Vulnerabilities are affected in Adobe Acrobat DC for MAC 15.006.30523Mac
Multiple Vulnerabilities are affected in Adobe Acrobat DC for MAC 17.011.30171Mac
Multiple Vulnerabilities are affected in Adobe Acrobat DC for MAC 20.001.30002Mac
Multiple Vulnerabilities are affected in Adobe Acrobat Reader DC for MAC 20.009.20074Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-315463Adobe Acrobat Reader DC (Continuous Track) update - All languages (20.012.20041) (APSB20-48)
PATCH-315464Adobe Acrobat Reader MUI DC (Continuous Track) update - All languages (20.012.20041) (APSB20-48)
PATCH-315461Adobe Acrobat DC Pro and Standard (Continuous Track) update - All languages (20.012.20041) (APSB20-48)
PATCH-315459Adobe Acrobat 2017 Pro and Standard (Acrobat 2017 Track) update - All languages (17.011.30175) (APSB20-48)
PATCH-315462Adobe Acrobat Reader 2017 MUI (Classic Track) (17.011.30175) (APSB20-48)
PATCH-315460Adobe Acrobat DC Pro and Standard (Classic Track) update - All languages (15.006.30527) (APSB20-48)
PATCH-315465Adobe Acrobat Reader MUI DC (Classic Track) update - All languages (15.006.30527) (APSB20-48)
PATCH-315661Adobe Acrobat Reader 2020 MUI (Classic Track) (20.001.30005)
PATCH-611991Adobe Acrobat DC for MAC (25.001.20693)(Deployment-Only)
PATCH-611991Adobe Acrobat DC for MAC (25.001.20693)(Deployment-Only)
PATCH-611991Adobe Acrobat DC for MAC (25.001.20693)(Deployment-Only)
PATCH-611989Adobe Acrobat Reader DC for MAC (25.001.20693)(Deployment-Only)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234