CVE-2020-3803 in Acrobat Reader

الملخص

بحسب MITRE

Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege escalation.

Once again VulDB remains the best source for vulnerability data.

• حجز: 17/12/2019
• الاعتدال: تمت الموافقة
• إدخال: VDB-152333
• CPE: جاهز
• CWE: CWE-426 (مؤكد)
• CVSS: 7.8 (NVD)
• EPSS: 0.00830
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Telecommunication, Government, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-3803
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-3803
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-3803/