ZDI-CAN-20712: Adobe Acrobat Blacklist Bypass Design flaw

Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an Violation of Secure Design Principles vulnerability that could result in arbitrary code execution in the context of the current user by bypassing the API blacklisting feature. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

违背安全设计原则

Adobe Acrobat Reader 安全漏洞

Adobe Acrobat Reader是美国奥多比（Adobe）公司的一款PDF查看器。该软件用于打印，签名和注释 PDF。 Adobe Acrobat Reader存在安全漏洞，该漏洞源于允许攻击者绕过API黑名单功能在当前用户环境中执行任意代码。受影响的产品和版本:Adobe Acrobat Reader 23.003.20244及之前版本，20.005.30467及之前版本。

N/A

N/A