CVE-2024-30284

Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*
OR cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*
cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
OR cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*
cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

02 Dec 2024, 21:22

Type Values Removed Values Added
First Time Adobe acrobat Reader
Adobe acrobat
Microsoft windows
Adobe acrobat Dc
Adobe acrobat Reader Dc
Apple macos
Adobe
Microsoft
Apple
CPE cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*
cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*
cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*
References () https://helpx.adobe.com/security/products/acrobat/apsb24-29.html - () https://helpx.adobe.com/security/products/acrobat/apsb24-29.html - Vendor Advisory

21 Nov 2024, 09:11

Type Values Removed Values Added
References () https://helpx.adobe.com/security/products/acrobat/apsb24-29.html - () https://helpx.adobe.com/security/products/acrobat/apsb24-29.html -
Summary
  • (es) Las versiones de Acrobat Reader 20.005.30574, 24.002.20736 y anteriores se ven afectadas por una vulnerabilidad Use After Free que podría provocar la ejecución de código arbitrario en el contexto del usuario actual. La explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso.

15 May 2024, 10:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-05-15 10:15

Updated : 2024-12-02 21:22


NVD link : CVE-2024-30284

Mitre link : CVE-2024-30284

CVE.ORG link : CVE-2024-30284


JSON object : View

Products Affected

adobe

  • acrobat_reader
  • acrobat_reader_dc
  • acrobat
  • acrobat_dc

microsoft

  • windows

apple

  • macos
CWE
CWE-416

Use After Free