CVE-2018-4917 Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, 2015.006.30394 and earlier have an exploitable heap overflow vulnerability. Successful exploitation could lead...
CriticalCVSS 9.8
EPSS 17.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, 2015.006.30394 and earlier have an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe acrobat 2017 | >= 17.011.30070, < 17.011.30078 | 17.011.30078 |
| Adobe Acrobat DC | >= 15.006.30394, < 15.006.30413 | 15.006.30413 |
| Adobe Acrobat DC | >= 18.009.20050, < 18.011.20035 | 18.011.20035 |
| Adobe acrobat reader 2017 | >= 17.011.30070, < 17.011.30078 | 17.011.30078 |
| Adobe Acrobat Reader DC | >= 15.006.30394, < 15.006.30413 | 15.006.30413 |
| Adobe Acrobat Reader DC | >= 18.009.20050, < 18.011.20035 | 18.011.20035 |
References
- 102992 third-party-advisory vdb-entry
- 1040364 third-party-advisory vdb-entry
- helpx.adobe.com vendor-advisory