CVE-2018-12798

Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflow vulnerability

published July 20, 2018

CVSS
—
EPSS
13%
Percentile
96.4
In the wild
Unconfirmed
What it is

⚠️ A heap overflow vulnerability in Adobe Acrobat & Reader could let attackers run any code you can! Just like a delivery driver who misreads the address, sending packages to the wrong destination. 📦✨ Think of this vulnerability as a delivery service that carelessly accepts any address without checking if it's valid. If the driver doesn’t verify where they’re going, they could end up dropping off packages at the wrong houses, leading to chaos! If exploited, this vulnerability could allow an attacker to execute arbitrary code on your system, potentially taking control of your machine and accessing sensitive information. Imagine someone sneaking into your home through a back door and rifling through your personal belongings!

Put simply

Think of this vulnerability as a delivery service that carelessly accepts any address without checking if it's valid. If the driver doesn’t verify where they’re going, they could end up dropping off packages at the wrong houses, leading to chaos! This heap overflow vulnerability exists in Adobe Acrobat and Reader versions 2018.011.20040 and earlier, which allows an attacker to corrupt the heap memory, leading to arbitrary code execution in the context of the current user session.

What to do

If exploited, this vulnerability could allow an attacker to execute arbitrary code on your system, potentially taking control of your machine and accessing sensitive information. Imagine someone sneaking into your home through a back door and rifling through your personal belongings! To protect yourself, upgrade Adobe Acrobat and Reader to the latest version immediately. Check for updates to ensure you're using a secure version, and stay proactive by enabling auto-updates whenever possible. You’ve got this! Patch those applications and keep your system safe! 🛡️✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.13302 · 96.4th percentile
Published
2018-07-20T19:00Z
EPSS history
Timeline
  • 20 JUL 19:00Z
    Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflow vulnerability
    cvelistv5