Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
References
Link | Resource |
---|---|
https://helpx.adobe.com/security/products/acrobat/apsb24-29.html | Vendor Advisory |
https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1946 | Technical Description Third Party Advisory |
https://helpx.adobe.com/security/products/acrobat/apsb24-29.html | Vendor Advisory |
https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1946 | Technical Description Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
History
02 Dec 2024, 21:22
Type | Values Removed | Values Added |
---|---|---|
References | () https://helpx.adobe.com/security/products/acrobat/apsb24-29.html - Vendor Advisory | |
References | () https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1946 - Technical Description, Third Party Advisory | |
CPE | cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:* cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:* cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:* cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:* cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* |
|
First Time |
Adobe
Adobe acrobat Apple Microsoft Adobe acrobat Reader Microsoft windows Adobe acrobat Dc Adobe acrobat Reader Dc Apple macos |
21 Nov 2024, 09:11
Type | Values Removed | Values Added |
---|---|---|
References | () https://helpx.adobe.com/security/products/acrobat/apsb24-29.html - | |
References | () https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1946 - |
10 Jun 2024, 18:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Summary |
|
15 May 2024, 10:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-05-15 10:15
Updated : 2024-12-02 21:22
NVD link : CVE-2024-30311
Mitre link : CVE-2024-30311
CVE.ORG link : CVE-2024-30311
JSON object : View
Products Affected
adobe
- acrobat_reader
- acrobat_reader_dc
- acrobat_dc
- acrobat
microsoft
- windows
apple
- macos
CWE
CWE-125
Out-of-bounds Read