QID 375611

Date Published: 2021-06-09

QID 375611: Adobe Security Update for Adobe Acrobat and Reader( APSB21-37)

Adobe Acrobat is a family of application software and Web services developed by Adobe Inc. to view, create, manipulate, print, and manage files in Portable Document Format. The family comprises Acrobat Reader, Acrobat, and Acrobat.com.

Adobe has released security updates to address the fix for Out-of-Bounds Read,Out-of-Bounds Write,Type Confusion,User After Free and Heap Overflow Vulnerabilities.

Affected Versions:
Acrobat DC Continuous 2021.001.20155 and earlier versions(windows and macOS)
Acrobat Reader DC Continuous 2021.001.20155 and earlier versions (Windows and macOS )
Acrobat 2020 Classic 2020, 2020.001.30025 and earlier versions (Windows and macOS)
Acrobat Reader 2020 Classic 2020, 2020.001.30025 and earlier versions (Windows and macOS)
Acrobat 2017 Classic 2017, 2017.011.30196 and earlier version (Windows and macOS)
Acrobat Reader 2017 Classic 2017, 2017.011.30196 and earlier version (Windows and macOS)
QID Detection Logic (Authenticated):
Operating System: Windows
This QID looks for the vulnerable version of Acrobat.dll, AcroRd32.dll and nppdf32.dll files.

QID Detection Logic (Authenticated):
Operating System: MacOS
This QID looks for the vulnerable version of Adobe Reader and Acrobat from the installed application list.

An attacker could exploit this vulnerability to compromise Confidentiality, Integrity and or Availability.

CVSS V3 rated as Critical - 8.8 severity.

CVSS V2 rated as High - 7.5 severity.

Solution

Adobe has released fix to address this issue. Customers are advised to refer to APSB21-37 for updates pertaining to this vulnerability.

Vendor References

APSB21-37 - helpx.adobe.com/security/products/acrobat/apsb21-37.html

CVEs related to QID 375611

CVE-2021-28551 | CVE-2021-28554 | CVE-2021-28552 | CVE-2021-28631 | CVE-2021-28632 |

Software Advisories

Advisory ID	Software	Component	Link
APSB21-37			helpx.adobe.com/security/products/acrobat/apsb21-37.html

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].