Untrusted Pointer Dereference Flaw in Adobe Acrobat and Reader
CVE-2018-16004

7.8HIGH

Key Information:

Vendor
Adobe
Status
Acrobat Dc
Acrobat Reader Dc
Vendor
CVE Published:
18 January 2019

Summary

Adobe Acrobat and Reader are susceptible to an untrusted pointer dereference vulnerability. This flaw could allow attackers to manipulate memory inappropriately, potentially leading to arbitrary code execution on compromised systems. Various versions of the software, including several from the 2015, 2017, and 2019 series, are impacted, exposing users to significant security risks if not addressed. It is crucial for users to apply available patches to mitigate these vulnerabilities and safeguard their systems.

References

http://www.securityfocus.com/bid/106161
vdb-entryx_refsource_BID
https://helpx.adobe.com/security/products/acrobat/apsb18-...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.