CVE-2024-34101: ZDI-CAN-23614: Adobe Acrobat Reader DC PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
First published: Wed May 15 2024(Updated: )
Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Any of | ||
| Adobe Acrobat | >=15.007.20033<24.002.20759 | |
| Adobe Acrobat Reader | >=15.007.20033<24.002.20759 | |
| Any of | ||
| Apple macOS | ||
| Microsoft Windows | ||
| All of | ||
| Any of | ||
| Adobe Acrobat Reader | >=20.001.30002<20.005.30635 | |
| Adobe Acrobat Reader | >=20.001.30002<20.005.30635 | |
| Apple macOS | ||
| All of | ||
| Any of | ||
| Adobe Acrobat Reader | >=20.001.30002<20.005.30636 | |
| Adobe Acrobat Reader | >=20.001.30002<20.005.30636 | |
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2024-34101?
CVE-2024-34101 is classified as a high-severity vulnerability due to its potential for sensitive memory disclosure.
How can I remediate CVE-2024-34101?
To fix CVE-2024-34101, update Adobe Acrobat and Adobe Reader to the latest version provided by Adobe.
Which versions are affected by CVE-2024-34101?
CVE-2024-34101 affects Adobe Acrobat versions up to 20.005.30635 and Adobe Acrobat Reader versions up to 20.005.30635.
Can exploitation of CVE-2024-34101 allow unauthorized access to my system?
Yes, exploitation of CVE-2024-34101 can allow attackers to bypass mitigations like ASLR and potentially access sensitive information.
Is CVE-2024-34101 specific to any operating system?
CVE-2024-34101 is not specific to any particular operating system, but affects Adobe Acrobat software across platforms.
- agent/references
- agent/weakness
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- agent/severity
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/adobe
- canonical/adobe acrobat
- version/adobe acrobat/15.007.20033
- canonical/adobe acrobat reader
- version/adobe acrobat reader/15.007.20033
- vendor/apple
- canonical/apple macos
- vendor/microsoft
- canonical/microsoft windows
- version/adobe acrobat reader/20.001.30002