Adobe.Acrobat.Reader.DC.EScript.api.Thermometer.Use.After.Free

Description

This indicates an attack attempt to exploit a Use After Free Vulnerability in Adobe Acrobat Reader DC.
The vulnerability is due to improper handling of Thermometer objects in memory. A remote attacker could exploit this vulnerability by enticing a target user into opening a maliciously crafted PDF document. Successful exploitation could result in the execution of arbitrary code under the security context of the target user.

Affected Products

Adobe Acrobat DC Continuous for Windows 2017.011.30161
Adobe Acrobat DC Continuous for Macintosh 2017.011.30161
Adobe Acrobat Reader DC Continuous for Windows 2017.011.30161
Adobe Acrobat Reader DC Continuous for Macintosh 2017.011.30161
Adobe Acrobat DC Classic for Windows 2015.006.30512
Adobe Acrobat DC Classic for Macintosh 2015.006.30512
Adobe Acrobat Reader DC Classic for Windows 2015.006.30512
Adobe Acrobat Reader DC Classic for Macintosh 2015.006.30512

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
https://helpx.adobe.com/security/products/acrobat/apsb21-51.html

References