CVE-2018-4989

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Use-after-free vulnerability

published July 9, 2018

CVSS
—
EPSS
12%
Percentile
96.0
In the wild
Unconfirmed
What it is

⚠️ A classic use-after-free vulnerability lurks in Adobe Acrobat and Reader! This loophole could let mischief-makers run any code they wish, all while posing as you! Think of it like a restaurant that keeps serving your favorite dish even after you’ve left the table. If a server takes an order from the table after you've already paid the bill, they might accidentally mess up your order with something completely out of bounds! If exploited, this vulnerability could allow an attacker to execute arbitrary code in the context of the current user. That means they could potentially steal sensitive information, manipulate documents, or even mess with your entire system, all while you’re blissfully unaware!

Put simply

Think of it like a restaurant that keeps serving your favorite dish even after you’ve left the table. If a server takes an order from the table after you've already paid the bill, they might accidentally mess up your order with something completely out of bounds! This use-after-free vulnerability occurs when Adobe Acrobat and Reader fail to properly manage memory during certain operations, allowing an attacker to execute arbitrary code by accessing freed memory locations.

What to do

If exploited, this vulnerability could allow an attacker to execute arbitrary code in the context of the current user. That means they could potentially steal sensitive information, manipulate documents, or even mess with your entire system, all while you’re blissfully unaware! To protect yourself, update Adobe Acrobat and Reader to the latest versions immediately. Versions newer than 2018.011.20039, 2017.011.30080, and 2015.006.30418 have patched this issue. Don't forget to enable automatic updates for future protection! You've got this! By following these steps, you'll keep your system safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.11630 · 96.0th percentile
Published
2018-07-09T19:00Z
EPSS history
Timeline
  • 09 JUL 19:00Z
    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Use-after-free vulnerability
    cvelistv5