HTTP: Adobe Acrobat and Acrobat Reader DC AcroForm Use After Free
This signature detects attempts to exploit a known vulnerability against Adobe Acrobat and Acrobat Reader DC AcroForm. A successful attack can lead to arbitrary code execution.
Extended Description
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability in the processing of the AcroForm deleteItemAt action that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Short Name
HTTP:STC:ADOBE:RDR-ACROFORM-UAF
Severity
Major
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
AcroForm Acrobat Adobe After CVE-2021-39836 CVE-2021-39837 CVE-2021-39838 CVE-2021-39839 CVE-2021-39840 DC Free Reader Use and
Release Date
09/28/2021
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3590
False Positive
Unknown
CVSS Score
6.8