CVE-2020-9694: Adobe Acrobat Reader DC JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
Other sources
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JPG2000 images. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-9694?
CVE-2020-9694 has a critical severity level due to its potential for arbitrary code execution.
How do I fix CVE-2020-9694?
To address CVE-2020-9694, update Adobe Acrobat and Reader to the latest version provided by Adobe.
Which versions of Adobe Acrobat and Reader are affected by CVE-2020-9694?
Affected versions include Adobe Acrobat and Reader versions 2020.009.20074 and earlier, and various earlier versions of 2020, 2017, and 2015.
Can CVE-2020-9694 be exploited remotely?
Yes, CVE-2020-9694 can be exploited remotely, allowing attackers to execute arbitrary code.
What are the consequences of exploiting CVE-2020-9694?
Exploitation of CVE-2020-9694 could lead to unauthorized access and control over the victim's system.