PT-2018-16683

CVE-2018-4982

·

Published

2018-05-14

·

Updated

2020-08-24

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2015.006.30417 and earlier Adobe Acrobat and Reader versions 2017.011.30079 and earlier Adobe Acrobat and Reader versions 2018.011.20038 and earlier
Description A heap overflow issue allows attackers to execute arbitrary code in the context of the current user. This can be achieved through successful exploitation of the vulnerability in the EMF BMP parsing component, leading to remote code execution.
Recommendations For Adobe Acrobat and Reader versions 2015.006.30417 and earlier, update to a version later than 2015.006.30417 to resolve the issue. For Adobe Acrobat and Reader versions 2017.011.30079 and earlier, update to a version later than 2017.011.30079 to resolve the issue. For Adobe Acrobat and Reader versions 2018.011.20038 and earlier, update to a version later than 2018.011.20038 to resolve the issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ZDI-18-466
Found an issue in the description? Have something to add? Feel free to write us 👾