CVE-2018-4993 Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an NTLM SSO hash theft vulnerability. Successful exploitation could lead t...
HighCVSS 7.5
EPSS 86.7%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an NTLM SSO hash theft vulnerability. Successful exploitation could lead to information disclosure.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe Acrobat DC | >= 15.006.30060, <= 15.006.30417 | No fix listed |
| Adobe Acrobat DC | >= 15.008.20082, <= 18.011.20038 | No fix listed |
| Adobe Acrobat DC | >= 17.011.30059, <= 17.011.30079 | No fix listed |
| Adobe Acrobat Reader DC | >= 15.006.30060, <= 15.006.30417 | No fix listed |
| Adobe Acrobat Reader DC | >= 15.008.20082, <= 18.011.20038 | No fix listed |
| Adobe Acrobat Reader DC | >= 17.011.30059, <= 17.011.30079 | No fix listed |
References
- 104177 third-party-advisory vdb-entry
- 1040920 third-party-advisory vdb-entry
- helpx.adobe.com patch vendor-advisory