JPCERT-AT-2020-0049
                                                             JPCERT/CC
                                                            2020-12-10

                  <<< JPCERT/CC Alert 2020-12-10 >>>

Alert Regarding Vulnerability in Adobe Acrobat and Reader (APSB20-75)

       https://www.jpcert.or.jp/english/at/2020/at200049.html


I. Overview
A vulnerability exists in Adobe Acrobat, a PDF file creation and
conversion software, and Adobe Acrobat Reader, a PDF file viewing
software. As a result, an attacker may disclose information by
convincing a user to open contents leveraging the vulnerability.
For more information, please refer to the Adobe's website.

    Adobe Incorporated
    Security update available for Adobe Acrobat and Reader | APSB20-75
    https://helpx.adobe.com/security/products/acrobat/apsb20-75.html


II. Affected Products
Affected products and versions are as follows:

  - Adobe Acrobat DC Continuous (2020.013.20066) and earlier (Windows, macOS)
  - Adobe Acrobat Reader DC Continuous (2020.013.20066) and earlier (Windows, macOS)
  - Adobe Acrobat 2020 Classic 2020 (2020.001.30010) and earlier (Windows, macOS)
  - Adobe Acrobat Reader 2020 Classic 2020 (2020.001.30010) and earlier (Windows, macOS)
  - Adobe Acrobat 2017 Classic 2017 (2017.011.30180) and earlier (Windows, macOS)
  - Adobe Acrobat Reader 2017 Classic 2017 (2017.011.30180) and earlier (Windows, macOS)


III. Solution
Please update Adobe products to the latest versions listed below. 

  - Adobe Acrobat DC Continuous (2020.013.20074) (Windows, macOS)
  - Adobe Acrobat Reader DC Continuous (2020.013.20074) (Windows, macOS)
  - Adobe Acrobat 2020 Classic 2020 (2020.001.30018) (Windows, macOS)
  - Adobe Acrobat Reader 2020 Classic 2020 (2020.001.30018) (Windows, macOS)
  - Adobe Acrobat 2017 Classic 2017 (2017.011.30188) (Windows, macOS)
  - Adobe Acrobat Reader 2017 Classic 2017 (2017.011.30188) (Windows, macOS)

Acrobat will be updated by starting the product, selecting the menu
"Help", and then clicking "Check for Updates". If an update
from the menu is not available, please download the latest Adobe
Acrobat and Reader from the following URLs. For more information,
please refer to the Adobe's website.

    Adobe Incorporated
    Download Adobe Acrobat Reader DC (Japanese)
    https://get2.adobe.com/jp/reader/

    Adobe Incorporated
    Download Acrobat 2020
    https://helpx.adobe.com/download-install/kb/acrobat-2020-downloads.html

    Adobe Incorporated
    Download Acrobat 2017
    https://helpx.adobe.com/download-install/kb/acrobat-2017-downloads.html


IV. References
    Adobe Incorporated
    Security update available for Adobe Acrobat and Reader | APSB20-75
    https://helpx.adobe.com/security/products/acrobat/apsb20-75.html

    Adobe Incorporated
    Security Updates Available for Adobe Acrobat and Reader (APSB20-75)
    https://blogs.adobe.com/psirt/?p=1952


If you have any information regarding this alert, please contact
JPCERT/CC.

======================================================================
JPCERT Coordination Center (Early Warning Group)
MAIL: ew-info@jpcert.or.jp
https://www.jpcert.or.jp/english/