CVE-2018-5064

Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds write…

published July 20, 2018

CVSS
—
EPSS
25%
Percentile
97.9
In the wild
Unconfirmed
What it is

⚠️ An out-of-bounds write vulnerability in Adobe Acrobat and Reader could allow attackers to execute arbitrary code—all from the cozy comfort of the current user’s account! 🔥 Think of it as a hotel room that has a secret door leading to the next suite—if someone can sneak in, they can start using the amenities without anyone noticing. This flaw lets attackers exploit memory beyond its limits, potentially accessing sensitive data or executing unwanted commands. If exploited, this vulnerability could let an attacker run malicious code directly in the context of the user currently logged into Adobe Acrobat or Reader. It's like giving someone the keys to your office while you’re taking a coffee break—major trouble could arise before you even realize it!

Put simply

Think of it as a hotel room that has a secret door leading to the next suite—if someone can sneak in, they can start using the amenities without anyone noticing. This flaw lets attackers exploit memory beyond its limits, potentially accessing sensitive data or executing unwanted commands. This out-of-bounds write vulnerability occurs when memory is improperly managed, allowing the attacker to write data to a location not allocated for it. This can lead to arbitrary code execution under the user's permissions, posing a serious risk to the affected systems.

What to do

If exploited, this vulnerability could let an attacker run malicious code directly in the context of the user currently logged into Adobe Acrobat or Reader. It's like giving someone the keys to your office while you’re taking a coffee break—major trouble could arise before you even realize it! To mitigate this vulnerability, ensure you update to the latest versions of Adobe Acrobat and Reader. Specifically, versions 2018.011.20041 and above, 2017.011.30081 and later, and 2015.006.30419 or higher should be applied. Regularly check for updates to keep your software secure! You've got this! Patch your Adobe applications and stay one step ahead of the bad guys! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.25106 · 97.9th percentile
Published
2018-07-20T19:00Z
EPSS history
Timeline
  • 20 JUL 19:00Z
    Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds write…
    cvelistv5