CVE-2018-5021

Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds write…

published July 20, 2018

CVSS
—
EPSS
8%
Percentile
95.0
In the wild
Unconfirmed
What it is

⚠️ An out-of-bounds write is hiding in Adobe Acrobat and Reader, which could allow anyone with access to execute arbitrary code! 🔥 Think of it like a waiter who accidentally serves a dish to the wrong table without checking orders—what if that dish was laced with something not good for the diners? In this case, the software could be tricked into running harmful commands, putting everything at risk! Successful exploitation could lead to an attacker running any code in the context of the current user, which is like giving someone the keys to your home and allowing them to act as if they are you. This could lead to data loss, theft, or even full system compromise!

Put simply

Think of it like a waiter who accidentally serves a dish to the wrong table without checking orders—what if that dish was laced with something not good for the diners? In this case, the software could be tricked into running harmful commands, putting everything at risk! This Out-of-bounds write vulnerability allows attackers to exploit memory handling flaws in Adobe Acrobat and Reader, leading to arbitrary code execution when certain conditions are met during program runtime.

What to do

Successful exploitation could lead to an attacker running any code in the context of the current user, which is like giving someone the keys to your home and allowing them to act as if they are you. This could lead to data loss, theft, or even full system compromise! Make sure to update to the patched versions: Adobe Acrobat and Reader 2018.011.20041 or newer, 2017.011.30081 or newer, and 2015.006.30419 or newer. Regularly check for updates and consider restricting user permissions as an additional precaution. 🛡️ You've got this! With the right updates, you can keep your systems secure and your data safe! 💪😊

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08390 · 95.0th percentile
Published
2018-07-20T19:00Z
EPSS history
Timeline
  • 20 JUL 19:00Z
    Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds write…
    cvelistv5