CVE-2021-45068 : Security Advisory and Response

Acrobat Reader DC versions 21.007.20099, 20.004.30017, and 17.011.30204 are impacted by an out-of-bounds write vulnerability allowing arbitrary code execution.

Understanding CVE-2021-45068

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

What is CVE-2021-45068?

Vulnerability in Acrobat Reader DC versions 21.007.20099, 20.004.30017, and 17.011.30204
Allows arbitrary code execution with user interaction via malicious files

The Impact of CVE-2021-45068

CVSS v3.0 Base Score: 7.8 (High)
Attack Complexity: Low
Attack Vector: Local
User Interaction Required
Confidentiality, Integrity, and Availability Impact: High

Technical Details of CVE-2021-45068

Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

Vulnerability Description

Out-of-bounds write flaw in font parsing
Enables threat actors to execute arbitrary code

Affected Systems and Versions

Adobe Acrobat Reader versions 21.007.20099, 20.004.30017, 17.011.30204

Exploitation Mechanism

Requires user interaction to open a malicious file

Mitigation and Prevention

Immediate Steps to Take:

Update the Acrobat Reader to the latest secure version
Be cautious while opening files from untrusted sources

Long-Term Security Practices:

Regularly update all software and applications
Implement security training to recognize and avoid phishing attempts
Monitor official security advisories for updates
Consider using additional security measures like endpoint protection
Backup important data regularly
Conduct periodic security audits
Educate users about safe computing practices
Employ network segmentation to limit attack surfaces
Implement the principle of least privilege
Use intrusion detection and prevention systems

Patching and Updates

Ensure your Adobe Acrobat Reader is up to date with the latest security patches and follow vendor recommendations for secure usage.