CVE-2018-12787

Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds write…

published July 20, 2018

CVSS
—
EPSS
8%
Percentile
94.9
In the wild
Unconfirmed
What it is

⚠️ An out-of-bounds write vulnerability in Adobe Acrobat could let the wrong user execute their own code with just a flick of a finger! 🔥 Think of it like a guest at a restaurant who swaps the chef's special ingredients with their own secret recipe—if the chef doesn't check, that could lead to a disastrous outcome! If an attacker successfully exploits this flaw, they could run arbitrary code on your system, potentially gaining full control over your device. Imagine the chaos if a malicious actor starts messing with sensitive documents or even your system settings!

Put simply

Think of it like a guest at a restaurant who swaps the chef's special ingredients with their own secret recipe—if the chef doesn't check, that could lead to a disastrous outcome! This out-of-bounds write vulnerability allows attackers to write data outside the intended memory allocation, which can lead to arbitrary code execution in the context of the current user.

What to do

If an attacker successfully exploits this flaw, they could run arbitrary code on your system, potentially gaining full control over your device. Imagine the chaos if a malicious actor starts messing with sensitive documents or even your system settings! To mitigate this risk, ensure that you're running the latest version of Adobe Acrobat or Reader. Specifically, upgrade to version 2018.011.20041 or later, 2017.011.30081 or later, or 2015.006.30419 or later. Regularly check for updates to stay protected! You've got this! Follow these steps to fortify your Adobe products and keep your system safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08390 · 94.9th percentile
Published
2018-07-20T19:00Z
EPSS history
Timeline
  • 20 JUL 19:00Z
    Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds write…
    cvelistv5