CVE-2019-7046

Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier…

published May 24, 2019

CVSS
—
EPSS
4%
Percentile
91.3
In the wild
Unconfirmed
What it is

⚠️ An untrusted pointer dereference in Adobe Acrobat could let attackers run arbitrary code – a real headache for anyone still using vulnerable versions! 🔥 Think of it like a restaurant that serves meals based on a handwritten note from a customer without checking if it’s from a trusted source. If that note says to add something dangerous, the kitchen might whip it up without a second thought! If exploited, this vulnerability could allow an attacker to execute any code they desire, leading to all sorts of chaos – from stealing sensitive information to messing with system functions. Imagine a thief walking into your home because you left your back door wide open – the potential damage is staggering!

Put simply

Think of it like a restaurant that serves meals based on a handwritten note from a customer without checking if it’s from a trusted source. If that note says to add something dangerous, the kitchen might whip it up without a second thought! This vulnerability allows for arbitrary code execution due to a failure to properly handle untrusted pointers in Adobe Acrobat and Reader versions up to 2019.010.20069, 2017.011.30113, and 2015.006.30464. Essentially, the application might trust code that it shouldn't, leading to uncontrollable consequences.

What to do

If exploited, this vulnerability could allow an attacker to execute any code they desire, leading to all sorts of chaos – from stealing sensitive information to messing with system functions. Imagine a thief walking into your home because you left your back door wide open – the potential damage is staggering! It's vital to upgrade your Adobe Acrobat and Reader to the latest version immediately! Check if your current version falls within the vulnerable list and apply the latest patches. Regularly updating your software can help protect against such threats in the future! You've got this! By taking these steps, you'll be reinforcing your defenses and keeping your data safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04413 · 91.3th percentile
Published
2019-05-24T18:18Z
EPSS history
Timeline
  • 24 MAY 18:18Z
    Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier…
    cvelistv5