CVE-2024-34129
📋 TL;DR
This path traversal vulnerability in Adobe Acrobat Mobile Sign for Android allows attackers to bypass directory restrictions and access or overwrite files outside intended boundaries. It affects Android users running Acrobat Mobile Sign version 24.4.2.33155 or earlier. No user interaction is required for exploitation, though attack complexity is high.
💻 Affected Systems
- Adobe Acrobat Mobile Sign
📦 What is this software?
⚠️ Risk & Real-World Impact
Worst Case
Complete compromise of the application's sandbox, allowing attackers to overwrite critical system files, steal sensitive user data, or install malicious payloads.
Likely Case
Unauthorized access to application data, configuration files, or user documents stored within the app's directory structure.
If Mitigated
Limited impact due to Android sandboxing and permission restrictions, potentially only affecting app-specific files.
🎯 Exploit Status
No user interaction required but attack complexity is rated high by Adobe. No known public exploits at time of advisory.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: Update to version newer than 24.4.2.33155
Vendor Advisory: https://helpx.adobe.com/security/products/acrobat-android/apsb24-50.html
Restart Required: Yes
Instructions:
1. Open Google Play Store 2. Search for 'Adobe Acrobat Mobile Sign' 3. Tap 'Update' if available 4. Alternatively, uninstall and reinstall latest version 5. Restart device after update
🔧 Temporary Workarounds
Disable or Remove App
androidTemporarily disable or uninstall Acrobat Mobile Sign until patched
adb shell pm disable-user --user 0 com.adobe.acrobat.mobilesign
adb uninstall com.adobe.acrobat.mobilesign
🧯 If You Can't Patch
- Restrict app permissions to minimum required
- Monitor for unusual file access patterns within app directory
🔍 How to Verify
Check if Vulnerable:
Check app version in Settings > Apps > Adobe Acrobat Mobile Sign > App infoCheck Version:
adb shell dumpsys package com.adobe.acrobat.mobilesign | grep versionNameVerify Fix Applied:
Verify version is newer than 24.4.2.33155 in app settings📡 Detection & Monitoring
Log Indicators:
- Unusual file access patterns in app logs
- Attempts to access paths with '../' sequences
Network Indicators:
- Unusual outbound connections from app to unexpected destinations
SIEM Query:
source="android_app_logs" app="AcrobatMobileSign" (path="*../*" OR file_access="*../*")