CVE-2019-16455

Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and…

published December 19, 2019

CVSS
—
EPSS
5%
Percentile
91.9
In the wild
Unconfirmed
What it is

⚠️ An untrusted pointer dereference is lurking in Adobe Acrobat and Reader! This vulnerability could grant attackers the keys to your digital kingdom. 🔑💥 Think of it like a restaurant accepting a reservation without checking if the name belongs to anyone — a stranger could walk in and sit at your table! In this case, the software trusts memory pointers it shouldn’t, leaving the door wide open for trouble. If an attacker successfully exploits this vulnerability, they could execute arbitrary code on your system! This means they could potentially take control of your device, access sensitive data, or even disrupt your operations. Yikes!

Put simply

Think of it like a restaurant accepting a reservation without checking if the name belongs to anyone — a stranger could walk in and sit at your table! In this case, the software trusts memory pointers it shouldn’t, leaving the door wide open for trouble. This untrusted pointer dereference vulnerability affects specific versions of Adobe Acrobat and Reader, allowing for code execution due to improper handling of memory references. These versions fail to securely validate memory pointers before using them, making it possible for attackers to exploit this flaw.

What to do

If an attacker successfully exploits this vulnerability, they could execute arbitrary code on your system! This means they could potentially take control of your device, access sensitive data, or even disrupt your operations. Yikes! To protect yourself, update Adobe Acrobat and Reader to the latest versions immediately. Ensure you're running versions after 2019.021.20056 for Acrobat and 2017.011.30155 for Reader. Regularly check for software updates to keep your systems secure! You've got this! Stay vigilant, and by following these steps, you'll keep those vulnerabilities at bay! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04782 · 91.9th percentile
Published
2019-12-19T14:51Z
EPSS history
Timeline
  • 19 DEC 14:51Z
    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and…
    cvelistv5