JPCERT-AT-2024-0016
JPCERT/CC
2024-08-14

I. Overview

Vulnerabilities exists in Adobe Acrobat, a PDF file creation and conversion software, and Adobe Acrobat Reader, a PDF file viewing software. As a result, an attacker may execute arbitrary code by convincing a user to open contents leveraging the vulnerability.For more information, please refer to the Adobe's website.

Adobe Incorporated
Security update available for Adobe Acrobat and Reader | APSB24-57
https://helpx.adobe.com/security/products/acrobat/apsb24-57.html

II. Affected Products

Affected products and versions are as follows:

- Adobe Acrobat DC Continuous (24.002.20991) and earlier (Windows)
- Adobe Acrobat DC Continuous (24.002.20964) and earlier (macOS)
- Adobe Acrobat Reader DC Continuous (24.002.20991) and earlier (Windows)
- Adobe Acrobat Reader DC Continuous (24.002.20964) and earlier (macOS)
- Adobe Acrobat 2024 Classic 2024 (24.001.30123) and earlier (Windows, macOS)
- Adobe Acrobat 2020 Classic 2020 (20.005.30636) and earlier (Windows)
- Adobe Acrobat 2020 Classic 2020 (20.005.30635) and earlier (macOS)
- Adobe Acrobat Reader 2020 Classic 2020 (20.005.30636) and earlier (Windows)
- Adobe Acrobat Reader 2020 Classic 2020 (20.005.30635) and earlier (macOS)

III. Solution

Please update Adobe products to the latest versions listed below.

- Adobe Acrobat DC Continuous (24.002.21005) (Windows, macOS)
- Adobe Acrobat Reader DC Continuous (24.002.21005) (Windows, macOS)
- Adobe Acrobat 2024 Classic 2024 (24.001.30159) (Windows, macOS)
- Adobe Acrobat 2020 Classic 2020 (20.005.30655) (Windows, macOS)
- Adobe Acrobat Reader 2020 Classic 2020 (20.005.30655) (Windows, macOS)

Acrobat will be updated by starting the product, selecting the menu"Help", and then clicking "Check for Updates". If an update from the menu is not available, please download the latest Adobe Acrobat and Reader from the following URLs. For more information,please refer to the Adobe's website.

Adobe Incorporated
Download Adobe Acrobat Reader DC (Japanese)
https://get.adobe.com/jp/reader/

Adobe Incorporated
Download Acrobat 2020
https://helpx.adobe.com/download-install/kb/acrobat-2020-downloads.html

IV. References

Adobe Incorporated
Latest Product Security Updates
https://helpx.adobe.com/security.html

Adobe Incorporated
Install updates for Acrobat and Reader
https://helpx.adobe.com/acrobat/kb/install-updates-reader-acrobat.html


If you have any information regarding this alert, please contact JPCERT/CC.

JPCERT Coordination Center (Early Warning Group)
MAIL: ew-info@jpcert.or.jp
https://www.jpcert.or.jp/english/