CVE-2018-4895

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions

published February 27, 2018

CVSS
—
EPSS
14%
Percentile
96.5
In the wild
Unconfirmed
What it is

⚠️ This vulnerability lets attackers potentially write past the end of the buffer in Adobe Acrobat Reader, a bit like a chef overflowing a mixing bowl and ruining the recipe! 🥴 Picture a waiter who keeps pouring wine into a glass that’s already full. Instead of stopping before it overflows, they just keep going, creating a mess. This vulnerability allows data to spill over, potentially leading to data corruption or even allowing malicious code execution. If exploited, an attacker could corrupt sensitive data or execute arbitrary code, putting your documents and systems at risk. This can open the door for some seriously unwanted surprises that could affect your workflows or compromise your data integrity!

Put simply

Picture a waiter who keeps pouring wine into a glass that’s already full. Instead of stopping before it overflows, they just keep going, creating a mess. This vulnerability allows data to spill over, potentially leading to data corruption or even allowing malicious code execution. The vulnerability arises within the image conversion engine of Adobe Acrobat Reader when processing Enhanced Metafile Format Plus (EMF+) data, enabling an attacker to write data beyond the intended buffer limits.

What to do

If exploited, an attacker could corrupt sensitive data or execute arbitrary code, putting your documents and systems at risk. This can open the door for some seriously unwanted surprises that could affect your workflows or compromise your data integrity! Update Adobe Acrobat Reader to the latest version immediately to safeguard against this vulnerability. Regularly check for updates and consider reviewing your document handling practices for added security. 🛡️ You've got this! With a quick update, you'll keep your system safe and sound! ✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.13666 · 96.5th percentile
Published
2018-02-27T05:00Z
EPSS history
Timeline
  • 27 FEB 05:00Z
    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions
    cvelistv5