CVE-2020-3799: Buffer Overflow

Q: What is the severity of CVE-2020-3799?

CVE-2020-3799 is rated as critical due to its potential for arbitrary code execution.

Q: How do I fix CVE-2020-3799?

To fix CVE-2020-3799, update Adobe Acrobat and Reader to the latest versions available.

Q: What software versions are affected by CVE-2020-3799?

CVE-2020-3799 affects Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, and 2015.006.30510 and earlier.

Q: Can CVE-2020-3799 be exploited remotely?

Yes, successful exploitation of CVE-2020-3799 can happen remotely, allowing attackers to execute arbitrary code.

Q: What are the potential risks of CVE-2020-3799?

The potential risks of CVE-2020-3799 include unauthorized access to system resources and execution of malicious code.

Published Mar 25, 2020

Updated

Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have a stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution .

Affected Software

16 affected components

Adobe Acrobat DC>=15.006.30060<15.006.30518

Adobe Acrobat DC>=15.008.20082<20.006.20042

Adobe Acrobat DC>=17.011.30059<17.011.30166

Adobe Acrobat Reader DC>=15.006.30060<15.006.30518

Adobe Acrobat Reader DC>=15.008.20082<20.006.20042

Adobe Acrobat Reader DC>=17.011.30059<17.011.30166

Apple macOS

Microsoft Windows

All of the following

Any of the following

Adobe Acrobat DC>=15.006.30060<15.006.30518

Adobe Acrobat DC>=15.008.20082<20.006.20042

Adobe Acrobat DC>=17.011.30059<17.011.30166

Adobe Acrobat Reader DC>=15.006.30060<15.006.30518

Adobe Acrobat Reader DC>=15.008.20082<20.006.20042

Adobe Acrobat Reader DC>=17.011.30059<17.011.30166

Any of the following

Apple macOS

Microsoft Windows

Event History

Mar 25, 2020

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

DescriptionWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2020-3799?

CVE-2020-3799 is rated as critical due to its potential for arbitrary code execution.

How do I fix CVE-2020-3799?

To fix CVE-2020-3799, update Adobe Acrobat and Reader to the latest versions available.

What software versions are affected by CVE-2020-3799?

CVE-2020-3799 affects Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, and 2015.006.30510 and earlier.

Can CVE-2020-3799 be exploited remotely?

Yes, successful exploitation of CVE-2020-3799 can happen remotely, allowing attackers to execute arbitrary code.

What are the potential risks of CVE-2020-3799?