
Cloud Vulnerability DB
A community-led vulnerabilities database
Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier were found to contain an out-of-bounds write vulnerability. The vulnerability was disclosed in May 2020 and assigned the identifier CVE-2020-9597 (Adobe Security, CVE Mitre).
The vulnerability is an out-of-bounds write flaw that exists within the parsing of JPEG files. When exploited, crafted data in a JPEG file can trigger a write past the end of an allocated buffer. The vulnerability has been rated as critical due to its potential impact (Threatpost).
Successful exploitation of this vulnerability could lead to arbitrary code execution in the context of the current user, potentially allowing an attacker to take control of the affected system (Adobe Security).
At the time of disclosure, Adobe stated that they were not aware of any exploits in the wild for this vulnerability (Threatpost).
Adobe has released patches to address this vulnerability. Users are advised to update to the latest versions of the affected products. The fix was included in Adobe's regularly-scheduled security update (Adobe Security).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."