CVE-2020-9593: Buffer Overflow

Q: What is the severity of CVE-2020-9593?

CVE-2020-9593 is classified as a critical vulnerability due to its potential for information disclosure.

Q: How do I fix CVE-2020-9593?

To fix CVE-2020-9593, update Adobe Acrobat and Reader to the latest versions available.

Q: Which versions of Adobe products are affected by CVE-2020-9593?

CVE-2020-9593 affects Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier.

Q: What type of vulnerability is CVE-2020-9593?

CVE-2020-9593 is an invalid memory access vulnerability that can lead to information disclosure.

Q: Can CVE-2020-9593 be exploited remotely?

Yes, successful exploitation of CVE-2020-9593 could potentially be done remotely if an attacker can induce a user to open a crafted document.

Published Jun 25, 2020

Updated

Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have an invalid memory access vulnerability. Successful exploitation could lead to information disclosure.

Affected Software

8 affected components

Adobe Acrobat DC>=15.006.30060<15.006.30518

Adobe Acrobat DC>=15.008.20082<20.006.20042

Adobe Acrobat DC>=17.011.30059<17.011.30166

Adobe Acrobat Reader DC>=15.006.30060<15.006.30518

Adobe Acrobat Reader DC>=15.008.20082<20.006.20042

Adobe Acrobat Reader DC>=17.011.30059<17.011.30166

Apple macOS

Microsoft Windows

Event History

Jun 25, 2020

CVE Published

via MITRE·09:22 PM

Data Sourced

via MITRE·09:22 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2020-9593?

CVE-2020-9593 is classified as a critical vulnerability due to its potential for information disclosure.

How do I fix CVE-2020-9593?

To fix CVE-2020-9593, update Adobe Acrobat and Reader to the latest versions available.

Which versions of Adobe products are affected by CVE-2020-9593?