← CVE Intelligence

CVE-2020-24430

Acrobat Pro DC Use-After-Free vulnerability Could Lead to Arbitrary Code Execution PUBLISHED

Description (CNA)

Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a use-after-free vulnerability when handling malicious JavaScript. This vulnerability could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a malicious file.

Affected (CNA)

Vendor / productVersions
Adobe / Acrobat Readeraffected unspecified through 2017.011.30175; affected unspecified through 2020.012.20048; affected unspecified through 2020.001.30005; affected unspecified through None

CWE

CWE-416

References

ADP enrichment

CVE

No English description supplied.