CVE-2020-9703: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier were identified with a stack exhaustion vulnerability. This vulnerability was assigned CVE-2020-9703 and was disclosed on August 19, 2020 (NVD).

The vulnerability has been assessed with a CVSS v3.1 Base Score of 5.5 (MEDIUM) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. Under CVSS v2.0, it received a Base Score of 4.3 (MEDIUM) with the vector (AV:N/AC:M/Au:N/C:N/I:N/A:P). The vulnerability is classified as CWE-400 (Uncontrolled Resource Consumption) (NVD).

Successful exploitation of this vulnerability could lead to application denial-of-service, affecting the availability of the Adobe Acrobat and Reader applications (CVE).

The vulnerability requires user interaction to exploit, as indicated by the CVSS vector string's UI:R component. The attack vector is local (AV:L), with low attack complexity (AC:L) and no privileges required (PR:N) (NVD).

Adobe has released security updates to address this vulnerability. Users should update to versions newer than those affected: 2020.009.20074, 2020.001.30002, 2017.011.30171, and 2015.006.30523 (Adobe Advisory).