CVE-2018-12848

Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and 2015.006.30448 and earlier have an out-of-bounds write…

published September 25, 2018

CVSS
—
EPSS
35%
Percentile
98.4
In the wild
Unconfirmed
What it is

⚠️ A sneaky out-of-bounds write vulnerability lurks in Adobe Acrobat and Reader, opening the door to arbitrary code execution! 🔥 Imagine a restaurant kitchen where a chef accidentally spills ingredients on the floor, causing chaos. Here, the out-of-bounds write is like that spill—it could lead to unpredictable and dangerous outcomes in your software. If an attacker successfully exploits this vulnerability, they could execute arbitrary code on your system. This means they might perform actions as if they were you, potentially compromising sensitive information and wreaking havoc on your files.

Put simply

Imagine a restaurant kitchen where a chef accidentally spills ingredients on the floor, causing chaos. Here, the out-of-bounds write is like that spill—it could lead to unpredictable and dangerous outcomes in your software. This vulnerability occurs when Adobe Acrobat and Reader versions 2018.011.20058 and earlier improperly handle memory operations, allowing for out-of-bounds writes which can be exploited to execute arbitrary code.

What to do

If an attacker successfully exploits this vulnerability, they could execute arbitrary code on your system. This means they might perform actions as if they were you, potentially compromising sensitive information and wreaking havoc on your files. Update Adobe Acrobat and Reader to the latest versions available to ensure you're protected against this vulnerability. Check your software periodically to stay ahead of any future issues. You've got this! Follow these steps, and you’ll keep your systems safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.34703 · 98.4th percentile
Published
2018-09-25T13:00Z
EPSS history
Timeline
  • 25 SEP 13:00Z
    Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and 2015.006.30448 and earlier have an out-of-bounds write…
    cvelistv5