CVE-2024-20733CWE-20

[ZS-VR-23-360] Adobe Acrobat Reader Parsing OTF font Denial-of-Service Vulnerability

Medium · published February 15, 2024

CVSS v3.1
5.5
EPSS
3%
Percentile
88.9
In the wild
Unconfirmed
What it is

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an Improper Input Validation vulnerability that could lead to an application denial-of-service. An attacker could leverage this vulnerability to cause the application to crash, resulting in a denial of service. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.03427 · 88.9th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2024-02-15T12:18Z
EPSS history
Timeline
  • 15 FEB 12:18Z
    [ZS-VR-23-360] Adobe Acrobat Reader Parsing OTF font Denial-of-Service Vulnerability
    cvelistv5