CVE-2024-45107: ZDI-CAN-24186: Adobe Acrobat Reader DC Doc Object Use-After-Free Information Disclosure Vulnerability
Acrobat Reader versions 20.005.30636, 24.002.20964, 24.001.30123, 24.002.20991 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45107?
CVE-2024-45107 is classified as a critical vulnerability due to its potential to lead to sensitive memory disclosure.
How do I fix CVE-2024-45107?
To fix CVE-2024-45107, update Adobe Acrobat Reader to a version later than 20.005.30655 or 24.001.30159.
Which versions of Acrobat Reader are affected by CVE-2024-45107?
CVE-2024-45107 affects Acrobat Reader versions 20.005.30636, 24.002.20964, 24.001.30123, and 24.002.20991 and earlier.
What is a Use After Free vulnerability in the context of CVE-2024-45107?
A Use After Free vulnerability, like CVE-2024-45107, allows attackers to exploit memory that has already been freed, potentially leading to memory corruption.
Can CVE-2024-45107 be exploited to bypass security mitigations?
Yes, exploitation of CVE-2024-45107 could allow attackers to bypass security mitigations such as Address Space Layout Randomization (ASLR).