CVE-2021-35982
29.09.2021, 16:15
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an Uncontrolled Search Path Element vulnerability. A local attacker with non-administrative privileges can plant a malicious DLL to achieve arbitrary code execution in the context of the current user via DLL hijacking. Exploitation of this issue requires user interaction.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| adobe | acrobat_dc | 20.006.20034 ≤ 𝑥 ≤ 21.005.20060 |
| adobe | acrobat_dc | 20.006.20034 ≤ 𝑥 ≤ 21.005.20058 |
| adobe | acrobat_reader_dc | 20.006.20034 ≤ 𝑥 ≤ 21.005.20060 |
| adobe | acrobat_dc | 20.006.20034 ≤ 𝑥 ≤ 21.005.20058 |
| adobe | acrobat_dc | 20.004.30005 ≤ 𝑥 ≤ 20.004.30006 |
| adobe | acrobat_reader_dc | 20.004.30005 ≤ 𝑥 ≤ 20.004.30006 |
| adobe | acrobat_dc | 17.011.30158 ≤ 𝑥 ≤ 17.011.30199 |
| adobe | acrobat_reader_dc | 17.011.30158 ≤ 𝑥 ≤ 17.011.30199 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| adobe | acrobat_reader | 𝑥 ≤ 2020.4.30006 | CNA |
| adobe | acrobat_reader | 𝑥 ≤ 2017.11.30199 | CNA |
| adobe | acrobat_reader | 𝑥 ≤ 2021.5.20060 | CNA |
Common Weakness Enumeration