CVE-2021-39859
Use After Free Adobe Acrobat Pro DC [HB-21-0339]
En bref Sévérité MEDIUM 5.5 EPSS EPSS 0.44 % · centile 38 (2026-10-27) État PUBLISHED Publiée 2023-09-06 Mise à jour 2024-08-04 Attribuée par adobe Statut NVD Modified Description Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Scores Version Score Vecteur Évalué par CVSS 3.1 MEDIUM 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N adobe CVSS 3.1 MEDIUM 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N NVD · psirt@adobe.com (Secondary)
Faiblesses (CWE)
Références européennes
Avis du CERT-FR
Configurations affectées (CPE NVD) cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:* ≥ 15.007.20033 ≤ 21.005.20060cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:* ≥ 15.007.20033 ≤ 21.005.20060cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:* ≥ 15.007.20033 ≤ 21.005.20058cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:* ≥ 15.007.20033 ≤ 21.005.20058cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:* ≥ 17.011.30180 < 17.011.30202cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:* ≥ 20.001.30005 < 20.004.30015cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:* ≥ 17.011.30180 < 17.011.30202cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:* ≥ 20.001.30005 < 20.004.30015Produits affectés
Références
Sources
