CVE-2022-28234
Adobe Acrobat Reader DC Heap Overflow Could Lead to RCE
Severity Score
7.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) is affected by a heap-based buffer overflow vulnerability due to insecure handling of a crafted .pdf file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted .pdf file
Acrobat Reader DC versiones 22.001.20085 (y anteriores), 20.005.3031x (y anteriores) y 17.012.30205 (y anteriores), están afectadas por una vulnerabilidad de desbordamiento del búfer en la región heap de la memoria debido a una administración no segura de un archivo .pdf diseñado, que podría resultar en una ejecución de código arbitrario en el contexto del usuario actual. La explotación requiere la interacción del usuario, ya que la víctima debe abrir un archivo .pdf diseñado
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2022-03-30 CVE Reserved
- 2022-05-11 CVE Published
- 2024-09-17 CVE Updated
- 2024-11-19 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-122: Heap-based Buffer Overflow
- CWE-787: Out-of-bounds Write
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://helpx.adobe.com/security/products/acrobat/apsb22-16.html | 2022-05-18 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Adobe Search vendor "Adobe" | Acrobat Dc Search vendor "Adobe" for product "Acrobat Dc" | >= 15.008.20082 <= 22.001.20085 Search vendor "Adobe" for product "Acrobat Dc" and version " >= 15.008.20082 <= 22.001.20085" | continuous |
Affected
| in | Apple Search vendor "Apple" | Macos Search vendor "Apple" for product "Macos" | - | - |
Safe
|
| Adobe Search vendor "Adobe" | Acrobat Dc Search vendor "Adobe" for product "Acrobat Dc" | >= 15.008.20082 <= 22.001.20085 Search vendor "Adobe" for product "Acrobat Dc" and version " >= 15.008.20082 <= 22.001.20085" | continuous |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
| Adobe Search vendor "Adobe" | Acrobat Reader Dc Search vendor "Adobe" for product "Acrobat Reader Dc" | >= 15.008.20082 <= 22.001.20085 Search vendor "Adobe" for product "Acrobat Reader Dc" and version " >= 15.008.20082 <= 22.001.20085" | continuous |
Affected
| in | Apple Search vendor "Apple" | Macos Search vendor "Apple" for product "Macos" | - | - |
Safe
|
| Adobe Search vendor "Adobe" | Acrobat Reader Dc Search vendor "Adobe" for product "Acrobat Reader Dc" | >= 15.008.20082 <= 22.001.20085 Search vendor "Adobe" for product "Acrobat Reader Dc" and version " >= 15.008.20082 <= 22.001.20085" | continuous |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
| Adobe Search vendor "Adobe" | Acrobat Search vendor "Adobe" for product "Acrobat" | >= 17.011.30059 <= 17.012.30205 Search vendor "Adobe" for product "Acrobat" and version " >= 17.011.30059 <= 17.012.30205" | classic |
Affected
| in | Apple Search vendor "Apple" | Macos Search vendor "Apple" for product "Macos" | - | - |
Safe
|
| Adobe Search vendor "Adobe" | Acrobat Search vendor "Adobe" for product "Acrobat" | >= 17.011.30059 <= 17.012.30205 Search vendor "Adobe" for product "Acrobat" and version " >= 17.011.30059 <= 17.012.30205" | classic |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
| Adobe Search vendor "Adobe" | Acrobat Reader Search vendor "Adobe" for product "Acrobat Reader" | >= 17.011.30059 <= 17.012.30205 Search vendor "Adobe" for product "Acrobat Reader" and version " >= 17.011.30059 <= 17.012.30205" | classic |
Affected
| in | Apple Search vendor "Apple" | Macos Search vendor "Apple" for product "Macos" | - | - |
Safe
|
| Adobe Search vendor "Adobe" | Acrobat Reader Search vendor "Adobe" for product "Acrobat Reader" | >= 17.011.30059 <= 17.012.30205 Search vendor "Adobe" for product "Acrobat Reader" and version " >= 17.011.30059 <= 17.012.30205" | classic |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
| Adobe Search vendor "Adobe" | Acrobat Search vendor "Adobe" for product "Acrobat" | >= 20.001.30005 <= 20.005.30314 Search vendor "Adobe" for product "Acrobat" and version " >= 20.001.30005 <= 20.005.30314" | classic |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
| Adobe Search vendor "Adobe" | Acrobat Reader Search vendor "Adobe" for product "Acrobat Reader" | >= 20.001.30005 <= 20.005.30314 Search vendor "Adobe" for product "Acrobat Reader" and version " >= 20.001.30005 <= 20.005.30314" | classic |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
| Adobe Search vendor "Adobe" | Acrobat Search vendor "Adobe" for product "Acrobat" | >= 20.001.30005 <= 20.005.30311 Search vendor "Adobe" for product "Acrobat" and version " >= 20.001.30005 <= 20.005.30311" | classic |
Affected
| in | Apple Search vendor "Apple" | Macos Search vendor "Apple" for product "Macos" | - | - |
Safe
|
| Adobe Search vendor "Adobe" | Acrobat Reader Search vendor "Adobe" for product "Acrobat Reader" | >= 20.001.30005 <= 20.005.30311 Search vendor "Adobe" for product "Acrobat Reader" and version " >= 20.001.30005 <= 20.005.30311" | classic |
Affected
| in | Apple Search vendor "Apple" | Macos Search vendor "Apple" for product "Macos" | - | - |
Safe
|