CVE-2020-9702: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier were found to contain a stack exhaustion vulnerability. The vulnerability was assigned CVE-2020-9702 and was disclosed on March 2, 2020. This security flaw affects multiple versions of Adobe's PDF handling software products (NVD, CVE MITRE).

The vulnerability is classified as an Uncontrolled Resource Consumption issue (CWE-400). According to the CVSS 3.1 scoring system, it received a base score of 5.5 (MEDIUM), with the following vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. The CVSS 2.0 assessment rated it at 4.3 (MEDIUM) with the vector (AV:N/AC:M/Au:N/C:N/I:N/A:P) (NVD).

When successfully exploited, this vulnerability can lead to application denial-of-service conditions in affected Adobe Acrobat and Reader installations (NVD).

The vulnerability requires user interaction to be exploited, as indicated by the CVSS vector (UI:R). It can be triggered through local access, though no authentication is required for exploitation (NVD).

Adobe has addressed this vulnerability in updated versions of the affected software. Users should upgrade their Adobe Acrobat and Reader installations to versions newer than those listed as vulnerable (Adobe Advisory).