CVEvulnerability

CVE-2020-29075

6.5 MEDIUM Published 2021-02-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-02-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-20, CWE-200

Description

Acrobat Reader DC versions 2020.013.20066 (and earlier), 2020.001.30010 (and earlier) and 2017.011.30180 (and earlier) are affected by an information exposure vulnerability, that could enable an attacker to get a DNS interaction and track if the user has opened or closed a PDF file when loaded from the filesystem without a prompt. User interaction is required to exploit this vulnerability.

Affected configurations

• adobe acrobat (>= 17.011.30059 <= 17.011.30180) • adobe acrobat (>= 20.001.30005 <= 20.001.30010) • adobe acrobat dc (>= 15.008.20082 <= 20.013.20066) • adobe acrobat reader (>= 17.011.30059 <= 17.011.30180) • adobe acrobat reader (>= 20.001.30005 <= 20.001.30010) • adobe acrobat reader dc (>= 15.008.20082 <= 20.013.20066)

Related

Weakness · CWE (2)

  • CWE-20 Improper Input Validation weakness
  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References