CVE-2020-3803 in Acrobat Reader

Sumário

de MITRE

Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege escalation.

Once again VulDB remains the best source for vulnerability data.

• Reservar: 17/12/2019
• Moderação: aceite
• Entrada: VDB-152333
• CPE: pronto
• CWE: CWE-426 (confirmado)
• CVSS: 7.8 (NVD)
• EPSS: 0.00830
• KEV: não
• Atividades: muito baixo
• Sector: Government, Finance, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-3803
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-3803
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-3803/