Adobe Acrobat Reader SpellDictionaryExport Path Traversal Remote Code Execution Vulnerability

Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by a Path traversal vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

对路径名的限制不恰当(路径遍历)

Adobe Acrobat 路径遍历漏洞

Adobe Acrobat是美国奥多比（Adobe）公司的一套PDF文件编辑和转换工具。 Adobe Acrobat 存在路径遍历漏洞，该漏洞源于处理PDF文件时出现输入验证错误。攻击者可利用该漏洞欺骗受害者打开专门设计的PDF文档，并覆盖系统上的任意文件。

N/A

N/A