CVE-2018-12755

Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds write…

published July 20, 2018

CVSS
—
EPSS
25%
Percentile
97.9
In the wild
Unconfirmed
What it is

⚠️ An out-of-bounds write vulnerability in Adobe Acrobat could let attackers execute arbitrary code just by getting you to open a document! 🚨 Think of it like a waiter who brings out a dish but accidentally serves a side of chaos—your document could become a launchpad for unexpected code to run instead of just displaying your text. 📜🍽️ The consequences could be significant; an attacker might gain full control over your user session, leading to unauthorized access to sensitive information, or worse, they could have free rein to manipulate your system. Imagine uninvited guests raiding your home while you're obliviously enjoying dinner!

Put simply

Think of it like a waiter who brings out a dish but accidentally serves a side of chaos—your document could become a launchpad for unexpected code to run instead of just displaying your text. 📜🍽️ This vulnerability allows an attacker to exploit Adobe Acrobat and Reader through improper handling of memory which results in an out-of-bounds write. This means that data gets written outside the allocated memory space, potentially allowing for code execution in the context of the current user.

What to do

The consequences could be significant; an attacker might gain full control over your user session, leading to unauthorized access to sensitive information, or worse, they could have free rein to manipulate your system. Imagine uninvited guests raiding your home while you're obliviously enjoying dinner! To mitigate this risk, ensure you've updated to the latest versions of Adobe Acrobat and Reader: 2019.010.20099 or later, 2018.011.20102 or later, and 2017.011.30104 or later. Regularly check for security updates to keep your software fortified against such vulnerabilities. 🛡️ You’ve got this! Stay vigilant and update your software to help keep the internet safe from lurking threats! 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.24973 · 97.9th percentile
Published
2018-07-20T19:00Z
EPSS history
Timeline
  • 20 JUL 19:00Z
    Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds write…
    cvelistv5