First published: Wed Aug 19 2020(Updated: )
Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have a buffer error vulnerability. Successful exploitation could lead to arbitrary code execution .
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Acrobat DC | >=15.006.30060<=15.006.30523 | |
Adobe Acrobat DC | >=15.008.20082<=20.009.20074 | |
Adobe Acrobat DC | >=17.011.30059<=17.011.30171 | |
Adobe Acrobat DC | =20.001.30002 | |
Adobe Acrobat DC | >=15.006.30060<=15.006.30523 | |
Adobe Acrobat DC | >=15.008.20082<=20.009.20074 | |
Adobe Acrobat DC | >=17.011.30059<=17.011.30171 | |
Adobe Acrobat DC | =20.001.30002 | |
Apple macOS | ||
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-9704 has been rated as critical due to its potential for leading to arbitrary code execution.
To fix CVE-2020-9704, update Adobe Acrobat and Reader to the latest version available.
CVE-2020-9704 affects Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier.
CVE-2020-9704 is a buffer error vulnerability that can be exploited to execute arbitrary code.
The key risk associated with CVE-2020-9704 is the potential for an attacker to gain control over the affected system through arbitrary code execution.