QID 375547

Date Published: 2021-05-12

QID 375547: Adobe Security Update for Adobe Acrobat and Reader (APSB21-29)

Adobe Acrobat is a family of application software and Web services developed by Adobe Inc. to view, create, manipulate, print, and manage files in Portable Document Format. The family comprises Acrobat Reader, Acrobat, and Acrobat.com.

Adobe has released security updates to address the fix for Out-of-Bounds Read,Out-of-Bounds Write,Type Confusion,User After Free and Heap Overflow Vulnerabilities.

Affected Versions:
Acrobat DC Continuous 2021.001.20150 and earlier versions (Windows)
Acrobat DC Continuous 2021.001.20149 and earlier versions(macOS)
Acrobat Reader DC Continuous 2021.001.20150 and earlier versions (Windows )
Acrobat Reader DC Continuous 2021.001.20149 and earlier versions (macOS)
Acrobat 2020 Classic 2020, 2020.001.30020 and earlier versions (Windows and macOS)
Acrobat Reader 2020 Classic 2020, 2020.001.30020 and earlier versions (Windows and macOS)
Acrobat 2017 Classic 2017, 2017.011.30194 and earlier version (Windows and macOS)
Acrobat Reader 2017 Classic 2017, 2017.011.30194 and earlier version (Windows and macOS)
QID Detection Logic (Authenticated):
Operating System: Windows
This QID looks for the vulnerable version of Acrobat.dll, AcroRd32.dll and nppdf32.dll files.

QID Detection Logic (Authenticated):
Operating System: MacOS
This QID looks for the vulnerable version of Adobe Reader and Acrobat from the installed application list.

Successful exploitation could lead to arbitrary code execution in the context of the current user.

CVSS V3 rated as High - 7.8 severity.

CVSS V2 rated as Critical - 9.3 severity.

Solution

The vendor has released patches in APSB21-29

Vendor References

APSB21-29 - helpx.adobe.com/security/products/acrobat/apsb21-29.html

CVEs related to QID 375547

CVE-2021-28561 | CVE-2021-28560 | CVE-2021-28558 | CVE-2021-28557 | CVE-2021-28555 | CVE-2021-28565 | CVE-2021-28564 | CVE-2021-21044 | CVE-2021-21038 | CVE-2021-21086 | CVE-2021-28559 | CVE-2021-28562 | CVE-2021-28550 | CVE-2021-28553 |

Software Advisories

Advisory ID	Software	Component	Link
apsb21-29	Windows,MAC		helpx.adobe.com/security/products/acrobat/apsb21-29.html

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].