Compliance Impact

This vulnerability could lead to the disclosure of sensitive information due to an out-of-bounds read in affected Adobe Acrobat and Reader versions. Such unauthorized disclosure of sensitive data may impact compliance with data protection regulations and standards like GDPR and HIPAA, which require safeguarding sensitive information against unauthorized access.

However, specific details on how this vulnerability affects compliance with these standards are not provided in the available information.

Useful 0 Not Useful 0

Executive Summary

This vulnerability is an out-of-bounds read issue found in certain versions of Adobe Acrobat and Reader. It allows an attacker to read memory outside the intended boundaries, which could lead to the disclosure of sensitive information stored in memory.

To exploit this vulnerability, an attacker needs the victim to open a specially crafted malicious file.

Useful 0 Not Useful 0

Impact Analysis

The impact of this vulnerability is the potential disclosure of sensitive information from the affected system's memory.

Since the vulnerability requires user interaction (opening a malicious file), the risk depends on the likelihood of a user opening such a file.

The CVSS base score of 5.5 indicates a medium severity level, with high confidentiality impact but no impact on integrity or availability.

Useful 0 Not Useful 0