First published: Wed Aug 19 2020(Updated: )
Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Acrobat | >=15.006.30060<=15.006.30523 | |
Adobe Acrobat | >=15.008.20082<=20.009.20074 | |
Adobe Acrobat | >=17.011.30059<=17.011.30171 | |
Adobe Acrobat | =20.001.30002 | |
Adobe Acrobat Reader | >=15.006.30060<=15.006.30523 | |
Adobe Acrobat Reader | >=15.008.20082<=20.009.20074 | |
Adobe Acrobat Reader | >=17.011.30059<=17.011.30171 | |
Adobe Acrobat Reader | =20.001.30002 | |
Apple iOS and macOS | ||
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-9719 is classified as having a medium severity level due to the potential for information disclosure.
To fix CVE-2020-9719, upgrade Adobe Acrobat and Reader to the latest versions provided by Adobe.
CVE-2020-9719 affects Adobe Acrobat and Reader versions 2020.009.20074 and earlier, among others.
CVE-2020-9719 requires local access to the application for exploitation, but successful attacks may lead to information disclosure.
If you cannot update, consider restricting access to the affected software or using alternative solutions until a patch can be applied.