Files
vuln-nvd/data/2020/CVE-2020-3803.json
T

2 lines
4.2 KiB
JSON
Raw Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{"affected":[{"affectedData":[{"product":"Adobe Acrobat and Reader","vendor":"Adobe","versions":[{"status":"affected","version":", 2020.006.20034 and earlier, 2017.011.30158  and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier versions"}]}],"source":"psirt@adobe.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*","matchCriteriaId":"5DEF2BF2-8443-4635-B747-F5A2AFF7C494","versionEndExcluding":"15.006.30518","versionStartIncluding":"15.006.30060","vulnerable":true},{"criteria":"cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*","matchCriteriaId":"7320FC19-1F09-4A78-9A11-F2B368361DDD","versionEndExcluding":"20.006.20042","versionStartIncluding":"15.008.20082","vulnerable":true},{"criteria":"cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*","matchCriteriaId":"BF418CC8-A5E0-4175-B543-CC8571884537","versionEndExcluding":"17.011.30166","versionStartIncluding":"17.011.30059","vulnerable":true},{"criteria":"cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*","matchCriteriaId":"625EC2BD-A118-4D9A-AB9B-B1BF753802ED","versionEndExcluding":"15.006.30518","versionStartIncluding":"15.006.30060","vulnerable":true},{"criteria":"cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*","matchCriteriaId":"11DA21BB-4D22-47F9-AE8D-101E486190B7","versionEndExcluding":"20.006.20042","versionStartIncluding":"15.008.20082","vulnerable":true},{"criteria":"cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*","matchCriteriaId":"C16B8F8D-4D39-4316-AF3B-39D0FE47E23E","versionEndExcluding":"17.011.30166","versionStartIncluding":"17.011.30059","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*","matchCriteriaId":"387021A0-AF36-463C-A605-32EA7DAC172E","vulnerable":false},{"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege escalation."},{"lang":"es","value":"Adobe Acrobat and Reader versiones 2020.006.20034 y anteriores, versiones 2017.011.30158 y anteriores, versiones 2017.011.30158 y anteriores, versiones 2015.006.30510 y anteriores, y versiones 2015.006.30510 y anteriores, presenta una vulnerabilidad de carga de biblioteca no segura (secuestro de dll). Una explotación con éxito podría conllevar a una escalada de privilegios."}],"id":"CVE-2020-3803","lastModified":"2026-06-17T03:19:04.700","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":4.4,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":3.4,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-03-25T18:15:13.843","references":[{"source":"psirt@adobe.com","tags":["Vendor Advisory"],"url":"https://helpx.adobe.com/security/products/acrobat/apsb20-13.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://helpx.adobe.com/security/products/acrobat/apsb20-13.html"}],"sourceIdentifier":"psirt@adobe.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-427"}],"source":"nvd@nist.gov","type":"Primary"}]}