CVE-2019-7051

Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier…

published May 24, 2019

CVSS
—
EPSS
4%
Percentile
91.3
In the wild
Unconfirmed
What it is

🚨 An untrusted pointer dereference in Adobe Acrobat can lead to arbitrary code execution, opening the door to potential chaos! Think of it like a restaurant that lets anyone in the kitchen without checking their credentials — if an unqualified chef can take charge, who knows what might end up on the menu? If exploited, an attacker could run malicious code on your system, leading to data theft, system compromise, or worse. Imagine a dinner party where an uninvited guest swaps the dessert with something far less palatable!

Put simply

Think of it like a restaurant that lets anyone in the kitchen without checking their credentials — if an unqualified chef can take charge, who knows what might end up on the menu? This vulnerability allows an attacker to manipulate memory through untrusted pointers, leading to arbitrary code execution when Adobe Acrobat or Reader processes certain documents.

What to do

If exploited, an attacker could run malicious code on your system, leading to data theft, system compromise, or worse. Imagine a dinner party where an uninvited guest swaps the dessert with something far less palatable! To safeguard your system, update Adobe Acrobat and Reader to the latest versions available. Regularly check for updates and ensure your software is running on the latest patch levels. Additionally, be cautious with document files from unknown sources. 🛡️ You’ve got this! Take these steps to protect your system and keep the digital dinner party safe! 🎉

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04413 · 91.3th percentile
Published
2019-05-24T18:24Z
EPSS history
Timeline
  • 24 MAY 18:24Z
    Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier…
    cvelistv5