CVE-2024-49535
CVSS V2 None
CVSS V3 None
Description
Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution. This vulnerability allows an attacker to provide malicious XML input containing a reference to an external entity, leading to data disclosure or potentially code execution. Exploitation of this issue requires user interaction in that a victim must process a malicious XML document.
Overview
- CVE ID
- CVE-2024-49535
- Assigner
- adobe
- Vulnerability Status
- PUBLISHED
- Published Version
- 2024-12-10T19:54:08.271Z
- Last Modified Date
- 2024-12-10T21:13:22.251Z
Weakness Enumerations
References
Reference URL | Reference Tags |
---|---|
https://helpx.adobe.com/security/products/acrobat/apsb24-92.html | vendor-advisory |
Sources
Source Name | Source URL |
---|---|
NIST | https://nvd.nist.gov/vuln/detail/CVE-2024-49535 |
MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-49535 |
History
Created | Old Value | New Value | Data Type | Notes |
---|---|---|---|---|
2024-12-11 13:20:55 | Added to TrackCVE |