Vulnerability CVE-2018-4917

Vulnerability CVE-2018-4917

Published: 2018-05-19

Description:

Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, 2015.006.30394 and earlier have an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Type:

CWE-119

(Improper Restriction of Operations within the Bounds of a Memory Buffer)

CVSS2 => (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score	Impact Subscore	Exploitability Subscore
10/10	10/10	10/10

Exploit range	Attack complexity	Authentication
Remote	Low	No required
Confidentiality impact	Integrity impact	Availability impact
Complete	Complete	Complete

Affected software
Adobe -> Acrobat 2017
Adobe -> Acrobat dc
Adobe -> Acrobat reader 2017
Adobe -> Acrobat reader dc

References:

http://www.securityfocus.com/bid/102992

http://www.securitytracker.com/id/1040364

https://helpx.adobe.com/security/products/acrobat/apsb18-02.html

Copyright 2024, cxsecurity.com