CVE-2018-16037

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version…

published January 18, 2019

CVSS
—
EPSS
6%
Percentile
93.0
In the wild
Unconfirmed
What it is

🚨 A surprising use-after-free vulnerability hides in Adobe Acrobat and Reader, allowing attackers to execute arbitrary code! 🔥 Think of it like a restaurant where a customer leaves their table, but the waiter forgets to clear the used plates and accidentally serves the same meal to another diner — chaos ensues! Here, the application mistakenly tries to use memory that has already been freed, leading to unexpected behavior. If exploited, an attacker could potentially gain control over the affected system, leading to the ability to run malicious code, steal sensitive information, or manipulate files. This could be absolutely devastating for users who rely on these PDF tools for important documents.

Put simply

Think of it like a restaurant where a customer leaves their table, but the waiter forgets to clear the used plates and accidentally serves the same meal to another diner — chaos ensues! Here, the application mistakenly tries to use memory that has already been freed, leading to unexpected behavior. This vulnerability arises when Adobe Acrobat and Reader do not properly manage memory, allowing an attacker to exploit the use of freed memory space to execute arbitrary code on the user's system.

What to do

If exploited, an attacker could potentially gain control over the affected system, leading to the ability to run malicious code, steal sensitive information, or manipulate files. This could be absolutely devastating for users who rely on these PDF tools for important documents. To protect yourself, update Adobe Acrobat and Reader to versions 2019.008.20082 or later, 2017.011.30107 or later, and 2015.006.30458 or later immediately. Regularly check for updates to ensure you're running the latest, most secure version! You've got this! Stay vigilant, update your software, and keep your digital world safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05682 · 93.0th percentile
Published
2019-01-18T17:00Z
EPSS history
Timeline
  • 18 JAN 17:00Z
    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version…
    cvelistv5