CVE-2023-21586

Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
References
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
OR cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
OR cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*

Configuration 3 (hide)

AND
OR cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
OR cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*
cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*

History

06 Feb 2025, 18:16

Type Values Removed Values Added
First Time Adobe
Adobe acrobat Reader Dc
Apple macos
Adobe acrobat Dc
Adobe acrobat
Microsoft windows
Apple
Adobe acrobat Reader
Microsoft
References () https://helpx.adobe.com/security/products/acrobat/apsb23-01.html - () https://helpx.adobe.com/security/products/acrobat/apsb23-01.html - Vendor Advisory
CPE cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*
cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*
Summary
  • (es) Las versiones 22.003.20282 (y anteriores), 22.003.20281 (y anteriores) y 20.005.30418 (y anteriores) de Adobe Acrobat Reader se ven afectadas por una vulnerabilidad de desreferencia de puntero nulo. Un atacante no autenticado podría aprovechar esta vulnerabilidad para lograr una denegación de servicio de la aplicación en el contexto del usuario actual. La explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso.

19 Dec 2024, 00:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-12-19 00:15

Updated : 2025-02-06 18:16


NVD link : CVE-2023-21586

Mitre link : CVE-2023-21586

CVE.ORG link : CVE-2023-21586


JSON object : View

Products Affected

adobe

  • acrobat_reader_dc
  • acrobat_reader
  • acrobat
  • acrobat_dc

microsoft

  • windows

apple

  • macos
CWE
CWE-476

NULL Pointer Dereference