IT

Tracker / CVE-2021-39857

CVE-2021-39857

Medium 4.3

Adobe Acrobat Reader DC add-on for Internet Explorer versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to check for existence of local files. Exploitation of this issue requires user interaction in that a victim must visit an attacker controlled web page.

Affected products and versions

adobe acrobat · 17.011.30059 → 17.011.30199
adobe acrobat · 20.001.30005 → 20.004.30006
adobe acrobat_dc · 15.008.20082 → 21.005.20058
adobe acrobat_dc · 15.008.20082 → 21.005.20060
adobe acrobat_reader · 17.011.30059 → 17.011.30199
adobe acrobat_reader · 20.001.30005 → 20.004.30006
adobe acrobat_reader_dc · 15.008.20082 → 21.005.20058
adobe acrobat_reader_dc · 15.008.20082 → 21.005.20060

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References