JPCERT-AT-2024-0005
                                                             JPCERT/CC
                                                            2024-02-14

                 <<< JPCERT/CC Alert 2024-02-14 >>>

 Alert Regarding Vulnerability in Adobe Acrobat and Reader (APSB24-07)

       https://www.jpcert.or.jp/english/at/2024/at240005.html


I. Overview
A vulnerability exists in Adobe Acrobat, a PDF file creation and
conversion software, and Adobe Acrobat Reader, a PDF file viewing
software. As a result, an attacker may execute arbitrary code by
convincing a user to open contents leveraging the vulnerability.
For more information, please refer to the Adobe's website.

    Adobe Incorporated
    Security update available for Adobe Acrobat and Reader  | APSB24-07
    https://helpx.adobe.com/security/products/acrobat/apsb24-07.html


II. Affected Products
Affected products and versions are as follows:

  - Adobe Acrobat DC Continuous (23.008.20470) and earlier (Windows, macOS)
  - Adobe Acrobat Reader DC Continuous (23.008.20470) and earlier (Windows, macOS)
  - Adobe Acrobat 2020 Classic 2020 (20.005.30539) and earlier (Windows, macOS)
  - Adobe Acrobat Reader 2020 Classic 2020 (20.005.30539) and earlier (Windows, macOS)


III. Solution
Please update Adobe products to the latest versions listed below. 

  - Adobe Acrobat DC Continuous (23.008.20533) (Windows, macOS)
  - Adobe Acrobat Reader DC Continuous (23.008.20533) (Windows, macOS)
  - Adobe Acrobat 2020 Classic 2020 (20.005.30574) (Windows, macOS)
  - Adobe Acrobat Reader 2020 Classic 2020 (20.005.30574) (Windows, macOS)

Acrobat will be updated by starting the product, selecting the menu
"Help", and then clicking "Check for Updates". If an update
from the menu is not available, please download the latest Adobe
Acrobat and Reader from the following URLs. For more information,
please refer to the Adobe's website.

    Adobe Incorporated
    Download Adobe Acrobat Reader DC (Japanese)
    https://get.adobe.com/jp/reader/

    Adobe Incorporated
    Download Acrobat 2020
    https://helpx.adobe.com/download-install/kb/acrobat-2020-downloads.html


IV. References
    Adobe Incorporated
    Latest Product Security Updates
    https://helpx.adobe.com/security.html

    Adobe Incorporated
    Install updates for Acrobat and Reader
    https://helpx.adobe.com/acrobat/kb/install-updates-reader-acrobat.html


If you have any information regarding this alert, please contact
JPCERT/CC.

======================================================================
JPCERT Coordination Center (Early Warning Group)
MAIL: ew-info@jpcert.or.jp
https://www.jpcert.or.jp/english/