CVE-2018-4987

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Untrusted pointer dereference…

published July 9, 2018

CVSS
—
EPSS
13%
Percentile
96.4
In the wild
Unconfirmed
What it is

⚠️ An untrusted pointer dereference in Adobe Acrobat means an attacker could potentially run malicious code without even breaking a sweat! Think of it like a restaurant's kitchen trusting every delivery without checking — one bad order could spoil the whole menu! If successfully exploited, an attacker could execute arbitrary code in the context of the current user. This means they could access sensitive data, modify files, or even take control of your system, all while masquerading as you!

Put simply

Think of it like a restaurant's kitchen trusting every delivery without checking — one bad order could spoil the whole menu! This vulnerability allows for arbitrary code execution due to untrusted pointer dereferencing, meaning the application could unintentionally reference memory it shouldn't. Essentially, it trusts inputs that could lead to dire consequences.

What to do

If successfully exploited, an attacker could execute arbitrary code in the context of the current user. This means they could access sensitive data, modify files, or even take control of your system, all while masquerading as you! To safeguard your system, update Adobe Acrobat or Reader to version 2018.011.20039 or later, and apply any available security patches. Regularly check for updates to ensure you're running the latest versions. You've got this! Stay vigilant, and your defenses will be stronger than ever! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.13322 · 96.4th percentile
Published
2018-07-09T19:00Z
EPSS history
Timeline
  • 09 JUL 19:00Z
    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Untrusted pointer dereference…
    cvelistv5