Copy link to clipboard
Copied
Is anyone aware if Acrobat Reader is affected by the vulnerability below, and if so what the recommendation is to address it?
Copy link to clipboard
Copied
Acrobat Reader is not affected.
Copy link to clipboard
Copied
Thanks @Bernd Alheit, is there documentation from Adobe to confirm this? Our IT Security have blocked all Adobe apps until we have written confirmation addressing the vulnerability.
Could you please point me to where Adobe might update the status of all their apps? I've seen confirmation for Coldfusion and AEM so far.
Copy link to clipboard
Copied
Acrobat Reader doesn't use Java!
Copy link to clipboard
Copied
Thanks @Bernd Alheit how about DC? Are all the Acrobat products the same?
Copy link to clipboard
Copied
Yes.
Copy link to clipboard
Copied
Hi Bryski - As this investigation is ongoing, I would reach our to Adobe Customer Support directly for confirmation. Please see: https://helpx.adobe.com/security/alertus.html
Adobe does have a security advisory posted for Log4J: https://helpx.adobe.com/security/products/log4j-2-advisory.html
Copy link to clipboard
Copied
Latest advisory for CVE-2021-44228 is here: https://helpx.adobe.com/security/products/log4j.html