CVE-2020-9693: Adobe Acrobat Reader DC JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
Other sources
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JPG2000 images. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-9693?
CVE-2020-9693 has a severity level that suggests potential for arbitrary code execution upon successful exploitation.
How do I fix CVE-2020-9693?
To address CVE-2020-9693, users should update Adobe Acrobat and Reader to the latest available versions.
Which versions of Adobe Acrobat and Reader are affected by CVE-2020-9693?
CVE-2020-9693 affects Adobe Acrobat and Reader versions 2020.009.20074 and earlier, as well as several earlier versions from 2015 and 2017.
Can CVE-2020-9693 be exploited remotely?
Yes, CVE-2020-9693 can potentially be exploited remotely, leading to significant security risks.
What types of systems are vulnerable to CVE-2020-9693?
CVE-2020-9693 impacts systems running specific vulnerable versions of Adobe Acrobat and Reader, mainly on Windows and macOS.