First published: Thu Jun 25 2020(Updated: )
Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Acrobat | >=15.006.30060<15.006.30518 | |
Adobe Acrobat | >=15.008.20082<20.006.20042 | |
Adobe Acrobat | >=17.011.30059<17.011.30166 | |
Adobe Acrobat Reader | >=15.006.30060<15.006.30518 | |
Adobe Acrobat Reader | >=15.008.20082<20.006.20042 | |
Adobe Acrobat Reader | >=17.011.30059<17.011.30166 | |
Apple iOS and macOS | ||
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-9600 is considered a moderate severity vulnerability due to the potential for information disclosure.
To fix CVE-2020-9600, you should update Adobe Acrobat or Reader to the latest version available.
Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier are affected by CVE-2020-9600.
CVE-2020-9600 does not have a remote exploit vector; it typically requires local access to the vulnerable software to exploit.
CVE-2020-9600 is classified as an out-of-bounds read vulnerability.