CVE-2020-9598: Buffer Overflow
First published: Thu Jun 25 2020(Updated: )
Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have an invalid memory access vulnerability. Successful exploitation could lead to information disclosure.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Acrobat Reader | >=15.006.30060<15.006.30518 | |
| Adobe Acrobat Reader | >=15.008.20082<20.006.20042 | |
| Adobe Acrobat Reader | >=17.011.30059<17.011.30166 | |
| Adobe Acrobat Reader Notification Manager | >=15.006.30060<15.006.30518 | |
| Adobe Acrobat Reader Notification Manager | >=15.008.20082<20.006.20042 | |
| Adobe Acrobat Reader Notification Manager | >=17.011.30059<17.011.30166 | |
| Apple iOS and macOS | ||
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2020-9598?
CVE-2020-9598 has a medium severity level as it involves an invalid memory access vulnerability that can lead to information disclosure.
How do I fix CVE-2020-9598?
To fix CVE-2020-9598, update Adobe Acrobat or Reader to the latest version that is not affected by this vulnerability.
What versions of Adobe Acrobat are affected by CVE-2020-9598?
Adobe Acrobat and Reader versions 2015.006.30518 and earlier, 2017.011.30166 and earlier, and 2020.006.20042 and earlier are affected by CVE-2020-9598.
Can CVE-2020-9598 be exploited remotely?
CVE-2020-9598 may be exploitable through crafted PDF files, leading to possible information disclosure when opened.
Is CVE-2020-9598 specific to any operating system?
CVE-2020-9598 affects Adobe Acrobat products regardless of the operating system, including both Windows and macOS.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/references
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/adobe
- canonical/adobe acrobat reader
- version/adobe acrobat reader/15.006.30060
- version/adobe acrobat reader/15.008.20082
- version/adobe acrobat reader/17.011.30059
- canonical/adobe acrobat reader notification manager
- version/adobe acrobat reader notification manager/15.006.30060
- version/adobe acrobat reader notification manager/15.008.20082
- version/adobe acrobat reader notification manager/17.011.30059
- vendor/apple
- canonical/apple ios and macos
- vendor/microsoft
- canonical/microsoft windows