Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB20-48)

JPCERT-AT-2020-0032
JPCERT/CC
2020-08-12

I. Overview

Vulnerabilities exist in Adobe Acrobat, a PDF file creation and conversion software, and Adobe Acrobat Reader, a PDF file viewing software. As a result, an attacker may execute arbitrary code or disclose information or bypass security feature by convincing a user to open contents leveraging the vulnerabilities. For more information,please refer to the Adobe website.Adobe Systems Incorporated
Security Updates Available for Adobe Acrobat and Reader | APSB20-48
https://helpx.adobe.com/security/products/acrobat/apsb20-48.html

II. Affected Products

Affected products and versions are as follows:

– Adobe Acrobat DC Continuous (2020.009.20074) and earlier (Windows, macOS)
– Adobe Acrobat Reader DC Continuous (2020.009.20074) and earlier (Windows, macOS)
– Adobe Acrobat 2020 Classic 2020 (20.001.30002) (Windows, macOS)
– Adobe Acrobat Reader 2020 Classic 2020 (20.001.30002) (Windows, macOS)
– Adobe Acrobat 2017 Classic 2017 (2017.011.30171) and earlier (Windows, macOS)
– Adobe Acrobat Reader 2017 Classic 2017 (2017.011.30171) and earlier (Windows, macOS)
– Adobe Acrobat 2015 Classic 2015 (2015.006.30523) and earlier (Windows, macOS)
– Adobe Acrobat Reader 2015 Classic 2015 (2015.006.30523) and earlier (Windows, macOS)

III. Solution

Please update Adobe Acrobat and Reader to the latest version listed below.

– Adobe Acrobat DC Continuous (2020.012.20041) (Windows, macOS)
– Adobe Acrobat Reader DC Continuous (2020.012.20041) (Windows, macOS)
– Adobe Acrobat 2020 Classic 2020 (2020.001.30005) (Windows, macOS)
– Adobe Acrobat Reader 2020 Classic 2020 (2020.001.30005) (Windows, macOS)
– Adobe Acrobat 2017 Classic 2017 (2017.011.30175) (Windows, macOS)
– Adobe Acrobat Reader 2017 Classic (2017.011.30175) (Windows, macOS)
– Adobe Acrobat 2015 Classic 2015 (2015.006.30527) (Windows, macOS)
– Adobe Acrobat Reader 2015 Classic 2015 (2015.006.30527) (Windows, macOS)

Acrobat will be updated by starting the product, selecting the menu”Help (H)”, and then clicking “Check for Updates (U)”. If an update from the menu is not available, please download the latest Adobe Acrobat and Reader from the following URL. For more information,please refer to the Adobe website.

Adobe Systems Incorporated
New downloads
https://supportdownloads.adobe.com/new.jsp

IV. References

Adobe Systems Incorporated
Security Updates Available for Adobe Acrobat and Reader | APSB20-48
https://helpx.adobe.com/security/products/acrobat/apsb20-48.html

Adobe Systems Incorporated
Security Bulletins Posted
https://blogs.adobe.com/psirt/?p=1908

Adobe Systems Incorporated
New downloads
https://supportdownloads.adobe.com/new.jsp

If you have any information regarding this alert, please contact JPCERT/CC.

JPCERT Coordination Center (Early Warning Group)
MAIL: ew-info@jpcert.or.jp
https://www.jpcert.or.jp/english/

Read More

https://www.malwaredevil.com/2020/08/12/security-alert-alert-regarding-vulnerabilities-in-adobe-acrobat-and-reader-apsb20-48/?utm_source=rss&utm_medium=rss&utm_campaign=security-alert-alert-regarding-vulnerabilities-in-adobe-acrobat-and-reader-apsb20-48