CVE-2018-4918

Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, 2015.006.30394 and earlier have an exploitable out-of-bounds write…

published May 19, 2018

CVSS
—
EPSS
12%
Percentile
96.1
In the wild
Unconfirmed
What it is

⚠️ An exploitable out-of-bounds write vulnerability in Adobe Acrobat could let an attacker execute arbitrary code! Imagine a sneaky delivery driver leaving packages outside your front door without checking the address. 🔥 This vulnerability is like a delivery person who doesn’t verify names or addresses, leading to important packages ending up in the wrong hands. In this case, it allows malicious code to slip right into your system, all because a simple check was neglected. If exploited, an attacker could execute arbitrary code within the current user's context. This means they could potentially gain access to sensitive data, corrupt files, or even take control of your machine — a nightmare scenario for any user!

Put simply

This vulnerability is like a delivery person who doesn’t verify names or addresses, leading to important packages ending up in the wrong hands. In this case, it allows malicious code to slip right into your system, all because a simple check was neglected. This out-of-bounds write vulnerability in Adobe Acrobat and Reader allows attackers to overwrite memory regions, resulting in arbitrary code execution when the software processes a specially crafted file.

What to do

If exploited, an attacker could execute arbitrary code within the current user's context. This means they could potentially gain access to sensitive data, corrupt files, or even take control of your machine — a nightmare scenario for any user! To mitigate this, users should update to the latest versions of Adobe Acrobat and Reader as soon as possible. Specifically, ensure you are on versions 2018.009.20051 or later, 2017.011.30071 or later, and 2015.006.30395 or later. You've got this! Stay vigilant, patch up, and keep your system secure. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.11821 · 96.1th percentile
Published
2018-05-19T17:00Z
EPSS history
Timeline
  • 19 MAY 17:00Z
    Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, 2015.006.30394 and earlier have an exploitable out-of-bounds write…
    cvelistv5