medium4.7
CVE-2023-29299
Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an Untrusted Search Path vulnerability that could lead …
Impact
Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an Untrusted Search Path vulnerability that could lead to Application denial-of-service. An attacker could leverage this vulnerability if the default PowerShell Set-ExecutionPolicy is set to Unrestricted, making the attack complexity high. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Acrobat Dc | from 15.008.20082 before 23.003.20269 |
| Adobe | Acrobat Reader Dc | from 15.008.20082 before 23.003.20269 |
| Adobe | Acrobat | from 20.001.30005 through 20.005.30516.10516 from 20.001.30005 before 20.005.30514.10514 |
| Adobe | Acrobat Reader | from 20.001.30005 before 20.005.30516.10516 from 20.001.30005 before 20.005.30514.10514 |