CVE-2020-3793: Use After Free

Q: What is the severity of CVE-2020-3793?

CVE-2020-3793 is classified as critical due to its potential to allow arbitrary code execution.

Q: How do I fix CVE-2020-3793?

To fix CVE-2020-3793, users should update Adobe Acrobat and Reader to the latest version as provided by Adobe.

Q: Which versions are affected by CVE-2020-3793?

CVE-2020-3793 affects Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, and 2015.006.30510 and earlier.

Q: What type of vulnerability is CVE-2020-3793?

CVE-2020-3793 is a use-after-free vulnerability that may lead to exploitation if successfully triggered.

Q: What can attackers achieve by exploiting CVE-2020-3793?

An attacker exploiting CVE-2020-3793 could execute arbitrary code on the affected user's system.

Published Mar 25, 2020

Updated

Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have a use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution .

Affected Software

16 affected components

Adobe Acrobat DC>=15.006.30060<15.006.30518

Adobe Acrobat DC>=15.008.20082<20.006.20042

Adobe Acrobat DC>=17.011.30059<17.011.30166

Adobe Acrobat Reader DC>=15.006.30060<15.006.30518

Adobe Acrobat Reader DC>=15.008.20082<20.006.20042

Adobe Acrobat Reader DC>=17.011.30059<17.011.30166

Apple macOS

Microsoft Windows

All of the following

Any of the following

Adobe Acrobat DC>=15.006.30060<15.006.30518

Adobe Acrobat DC>=15.008.20082<20.006.20042

Adobe Acrobat DC>=17.011.30059<17.011.30166

Adobe Acrobat Reader DC>=15.006.30060<15.006.30518

Adobe Acrobat Reader DC>=15.008.20082<20.006.20042

Adobe Acrobat Reader DC>=17.011.30059<17.011.30166

Any of the following

Apple macOS

Microsoft Windows

Event History

Mar 25, 2020

CVE Published

via MITRE·03:58 PM

Data Sourced

via MITRE·03:58 PM

DescriptionWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2020-3793?

CVE-2020-3793 is classified as critical due to its potential to allow arbitrary code execution.

How do I fix CVE-2020-3793?

To fix CVE-2020-3793, users should update Adobe Acrobat and Reader to the latest version as provided by Adobe.

Which versions are affected by CVE-2020-3793?

CVE-2020-3793 affects Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, and 2015.006.30510 and earlier.

What type of vulnerability is CVE-2020-3793?

CVE-2020-3793 is a use-after-free vulnerability that may lead to exploitation if successfully triggered.

What can attackers achieve by exploiting CVE-2020-3793?