CVE-2021-39849: Adobe Acrobat Reader DC Null Pointer Dereference Could Lead To Application Denial-of-Service
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-39849?
CVE-2021-39849 is classified as a moderate severity vulnerability that can lead to application denial-of-service.
How do I fix CVE-2021-39849?
To fix CVE-2021-39849, update Adobe Acrobat Reader DC to version 21.005.20061 or later.
Which Adobe products are affected by CVE-2021-39849?
CVE-2021-39849 affects Adobe Acrobat Reader DC versions prior to 21.005.20061, as well as earlier versions of Acrobat 2020 and 2017.
Can an attacker exploit CVE-2021-39849 remotely?
Yes, CVE-2021-39849 can be exploited by an unauthenticated attacker, potentially leading to application downtime.
What happens if I am vulnerable to CVE-2021-39849?
Being vulnerable to CVE-2021-39849 may result in a crash of the application, affecting user access to PDFs.