Adobe Acrobat and Reader Heap-Based Buffer Overflow

Successful exploitation can result in arbitrary code execution on the victim system in the security context of the user running Adobe Reader or Acrobat. In practical terms, this can allow an attacker to install malware, steal data, modify files, or use the compromised workstation as a foothold for further intrusion. The content also indicates the vulnerability has been actively exploited in the wild and was later added to CISA's Known Exploited Vulnerabilities catalog.

If immediate patching is not possible, reduce exposure by preventing users from opening untrusted or unsolicited PDF files, especially those received via email or downloaded from untrusted websites. Use email and web content filtering to block suspicious PDF attachments, enforce least privilege so code execution occurs with minimal user rights, and consider application isolation or sandboxing for PDF handling where available. Because this vulnerability is associated with legacy Adobe versions and known exploitation, discontinuing use of vulnerable unsupported releases is an important mitigation.

Upgrade Adobe Reader and Adobe Acrobat to fixed versions: 7.1.4 or later on the 7.x branch, 8.1.7 or later on the 8.x branch, and 9.2 or later on the 9.x branch. For environments still running unsupported legacy versions, the appropriate remediation is to remove or replace the affected software with a supported release, as older product lines may no longer receive security updates.