CVE-2019-16446

Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and…

published December 19, 2019

CVSS
—
EPSS
5%
Percentile
91.9
In the wild
Unconfirmed
What it is

⚠️ A little oversight in Adobe Acrobat could let an attacker execute arbitrary code just by opening a malicious file! 🎉 Think of it like a restaurant serving food with ingredients that the chef didn't trust — if they don’t check the source, a nasty surprise might end up on the plate! If exploited, this vulnerability could allow an attacker to run any code of their choosing, potentially compromising the entire system. It’s a bit like giving a stranger the keys to your house; you never know what they might do!

Put simply

Think of it like a restaurant serving food with ingredients that the chef didn't trust — if they don’t check the source, a nasty surprise might end up on the plate! This untrusted pointer dereference vulnerability allows an attacker to leverage unverified input, leading to arbitrary code execution. Essentially, if the application doesn’t properly check pointers, it can end up executing harmful code instead of the intended actions.

What to do

If exploited, this vulnerability could allow an attacker to run any code of their choosing, potentially compromising the entire system. It’s a bit like giving a stranger the keys to your house; you never know what they might do! To protect against this, upgrade Adobe Acrobat and Reader to the latest versions. Specifically, ensure you're running at least version 2019.021.20057 or later to close this loophole. Don't forget to educate users about the risks of opening untrusted documents! You've got this! By taking these steps, you'll bolster your defenses and keep your systems secure. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04782 · 91.9th percentile
Published
2019-12-19T14:33Z
EPSS history
Timeline
  • 19 DEC 14:33Z
    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and…
    cvelistv5