CVE-2020-9595: Buffer Overflow
First published: Thu Jun 25 2020(Updated: )
Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have an invalid memory access vulnerability. Successful exploitation could lead to information disclosure.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Acrobat Reader | >=15.006.30060<15.006.30518 | |
| Adobe Acrobat Reader | >=15.008.20082<20.006.20042 | |
| Adobe Acrobat Reader | >=17.011.30059<17.011.30166 | |
| Adobe Acrobat Reader Notification Manager | >=15.006.30060<15.006.30518 | |
| Adobe Acrobat Reader Notification Manager | >=15.008.20082<20.006.20042 | |
| Adobe Acrobat Reader Notification Manager | >=17.011.30059<17.011.30166 | |
| Apple iOS and macOS | ||
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2020-9595?
CVE-2020-9595 is classified as a critical vulnerability due to its potential for information disclosure.
How do I fix CVE-2020-9595?
To mitigate CVE-2020-9595, users should update Adobe Acrobat and Reader to the latest versions provided by Adobe.
What versions of Adobe Acrobat and Reader are affected by CVE-2020-9595?
Versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, as well as 2015.006.30518 and earlier are affected by CVE-2020-9595.
What are the potential impacts of CVE-2020-9595?
CVE-2020-9595 may allow an attacker to exploit an invalid memory access vulnerability leading to information disclosure.
Is CVE-2020-9595 exploitable in Adobe Acrobat DC?
Yes, CVE-2020-9595 is exploitable in various editions of Adobe Acrobat DC as per the affected versions.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/references
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/adobe
- canonical/adobe acrobat reader
- version/adobe acrobat reader/15.006.30060
- version/adobe acrobat reader/15.008.20082
- version/adobe acrobat reader/17.011.30059
- canonical/adobe acrobat reader notification manager
- version/adobe acrobat reader notification manager/15.006.30060
- version/adobe acrobat reader notification manager/15.008.20082
- version/adobe acrobat reader notification manager/17.011.30059
- vendor/apple
- canonical/apple ios and macos
- vendor/microsoft
- canonical/microsoft windows