Adobe Acrobat Reader DC Use After Free Arbitrary Code Execution

Adobe Acrobat Reader DC version 21.007.20095 (and earlier), 21.007.20096 (and earlier), 20.004.30015 (and earlier), and 17.011.30202 (and earlier) is affected by a use-after-free vulnerability in the processing of the GetURL function on a global object window that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

释放后使用

Adobe Acrobat Reader Dc 资源管理错误漏洞

Adobe Acrobat Reader Dc是美国Adobe公司的一个 Pdf 阅读工具。用于可靠查看、打印和注释 Pdf 文档。 Adobe Acrobat Reader DC 存在资源管理错误漏洞，该漏洞源于在处理PDF文件时存在释放后使用的问题。远程攻击者可通过专门制作的PDF文件，触发一个释放后使用错误错误在系统上执行任意代码。

N/A

资源管理错误