Files
vuln-nvd/data/2020/CVE-2020-3742.json

2 lines
4.6 KiB
JSON
Raw Permalink Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{"affected":[{"affectedData":[{"product":"Adobe Acrobat and Reader","vendor":"Adobe","versions":[{"status":"affected","version":", 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier versions"}]}],"source":"psirt@adobe.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*","matchCriteriaId":"547289E1-4310-41FC-BB58-8EE29E48FF71","versionEndIncluding":"15.006.30508","versionStartIncluding":"15.006.30060","vulnerable":true},{"criteria":"cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*","matchCriteriaId":"DC32224F-A798-48C9-ACCE-5FF2191996CE","versionEndIncluding":"19.021.20061","versionStartIncluding":"15.008.20082","vulnerable":true},{"criteria":"cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*","matchCriteriaId":"2D68BB15-A771-4322-947D-4B026D3D72BA","versionEndIncluding":"15.006.30508","versionStartIncluding":"15.006.30060","vulnerable":true},{"criteria":"cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*","matchCriteriaId":"1B31448B-D4EF-4966-BFBE-21B6F0DFD1F9","versionEndIncluding":"19.021.20061","versionStartIncluding":"15.008.20082","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*","matchCriteriaId":"387021A0-AF36-463C-A605-32EA7DAC172E","vulnerable":false},{"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*","matchCriteriaId":"FEE581FE-A73C-4C0A-8AD7-DE2DC96A2450","versionEndIncluding":"17.011.30156","versionStartIncluding":"17.011.30059","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*","matchCriteriaId":"387021A0-AF36-463C-A605-32EA7DAC172E","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*","matchCriteriaId":"C96FD617-9C04-4016-B15D-E0201BC29C95","versionEndIncluding":"17.011.30156","versionStartIncluding":"17.011.30059","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Acrobat and Reader versions, 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution ."},{"lang":"es","value":"Las versiones de Adobe Acrobat and Reader, 2019.021.20061 y anteriores, 2017.011.30156 y anteriores, 2017.011.30156 y anteriores, y 2015.006.30508 y anteriores, presentan una vulnerabilidad de desbordamiento de la pila. Una explotación con éxito podría conllevar a una ejecución de código arbitrario."}],"id":"CVE-2020-3742","lastModified":"2026-06-17T03:18:57.323","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":10.0,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":10.0,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-02-13T16:15:12.387","references":[{"source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"],"url":"https://helpx.adobe.com/security/products/acrobat/apsb20-05.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://helpx.adobe.com/security/products/acrobat/apsb20-05.html"}],"sourceIdentifier":"psirt@adobe.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-787"}],"source":"nvd@nist.gov","type":"Primary"}]}