CVE-2018-19707

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version…

published January 18, 2019

CVSS
—
EPSS
6%
Percentile
93.0
In the wild
Unconfirmed
What it is

⚡ A classic "use after free" flaw is lurking in older versions of Adobe Acrobat and Reader, just waiting for a curious hacker to exploit it! 🦸 Think of this vulnerability like a party that never cleaned up after a massive gathering — a cake slice left behind can be grabbed and devoured by anyone who sneaks in through the open door. Just like that forgotten treat, this flaw lets attackers execute arbitrary code if they know how to reach it. An attacker could waltz right in and run malicious code on your machine, potentially leading to a compromised system and loss of sensitive data. It's like handing over the keys to your digital kingdom, allowing them to do just about anything on your computer!

Put simply

Think of this vulnerability like a party that never cleaned up after a massive gathering — a cake slice left behind can be grabbed and devoured by anyone who sneaks in through the open door. Just like that forgotten treat, this flaw lets attackers execute arbitrary code if they know how to reach it. This vulnerability arises when memory that has been freed is accessed by the application, creating the chance for attackers to inject and execute arbitrary code. It primarily affects Adobe Acrobat and Reader versions 2015, 2017, and 2019, with multiple earlier versions vulnerable as well.

What to do

An attacker could waltz right in and run malicious code on your machine, potentially leading to a compromised system and loss of sensitive data. It's like handing over the keys to your digital kingdom, allowing them to do just about anything on your computer! To protect yourself, update Adobe Acrobat and Reader to the latest version immediately. This ensures you close the door on potential attackers and clean up any remnants of the past party. Always keep your software up to date for optimal security! You've got this! Just follow these steps to secure your system, and you'll be back to your heroic self in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05682 · 93.0th percentile
Published
2019-01-18T17:00Z
EPSS history
Timeline
  • 18 JAN 17:00Z
    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version…
    cvelistv5