How To Fix CVE-2022-24091(2)- New RCE Vulnerabilities In Adobe Acrobat Reader DC

Abode has disclosed a couple of new RCE vulnerability in Acrobat Reader affecting both macOS and Windows. Successful exploitation of these vulnerabilities can lead to arbitrary code execution, application denial of service, memory leak, privilege escalation, and security feature bypass. There is a need to fix this vulnerability. This article will show you how to fix CVE-2022-24091 (2), RCE vulnerability in Adobe Acrobat Reader.

User interaction is needed to exploit this vulnerability in a way that the target must open a malicious file or visit a malicious page. The flaw exists within the embedded font parsing. This problem exists due to a lack of proper validation of user data, resulting in a write past end of an allocated buffer. Attackers can use this vulnerability to execute malicious code in the context of the current process.

Adobe Acrobat Reader DC

Adobe Acrobat Reader is a free cross-platform allowing users to create, view, collaborate, sign, and annotate PDF files. It’s an essential PDF tool that can convert any document virtually to PDF format while preserving the form and content of the original file.

Moreover, it gives the ability to create and edit images and texts in PDF documents. Adobe Acrobat Reader is an advanced version of the Adobe Reader with additional functionalities, such as the ability to scan a paper document.

Summary Of The New RCE Vulnerabilities In Adobe Acrobat Reader- CVE-2022-24091(2):

CVE-2022-24091(2) remote code execution vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Reader DC. It exists within the parsing of embedded fonts.

Version Affected By These RCE Vulnerabilities:

Here is the list of versions affected by CVE-2022-24091 (2) Remote Code Execution Vulnerability.

How To Fix CVE-2022-24091(2)- New RCE Vulnerabilities In Adobe Acrobat Reader DC?

This section will discuss how to fix CVE-2022-24091 (2), RCE vulnerabilities in Adobe Acrobat Reader. Adobe categorized the following updates with these priority ratings and recommends updating to the latest versions.

Adobe Recommends Software Installation Updates To The Latest Versions Using The Following Instructions.

The product version is available to users through one of the following methods.

1. For Individuals

• The product will automatically update without requiring user intervention after detecting the updates.
• Users can manually update product installations by selecting Help > Check for Updates.
• The Acrobat Reader installer can be downloaded here.

2. For IT administrators:

• Refer to particular release note version for installer links.
• Push the updates through your preferred methodologies, such as bootstrapper, AIP-GPO, SCUP/SCCM, or on macOS, Remote Desktop, and SSH.

We hope this post will help you know How to Fix CVE-2022-24091(2)- New RCE Vulnerabilities in Adobe Acrobat Reader DC. Please share this post and help to secure the digital world. Visit our social media page on Facebook, LinkedIn, Twitter, Telegram, Tumblr, & Medium and subscribe to receive updates like this. 

• Identify And Fix Your Adobe Products Affected With Multiple Vulnerabilities
• How To Fix The New ACE Vulnerability In Adobe After Effects- CVE-2022-23200
• How To Fix CVE-2022-24086- A Critical 0-Day Arbitrary Code Execution Vulnerability In Magento
• How To Fix “InstallerFileTakeOver” 0day LPE Vulnerability In Windows?
• What Is Remote Code Execution? How To Prevent Remote Code Execution?