CVE-2019-7052

Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier…

published May 24, 2019

CVSS
—
EPSS
4%
Percentile
90.5
In the wild
Unconfirmed
What it is

⚠️ An out-of-bounds write vulnerability can sneak in through Adobe Acrobat and Reader, allowing an attacker to execute arbitrary code — a recipe for disaster! 🔥 Think of it like a delivery truck making an unauthorized stop and dropping off mysterious packages at your office. If no one checks the contents, who knows what chaos could ensue! If exploited, this vulnerability could lead to an attacker running any code they desire on your system, leaving your sensitive data vulnerable to theft or destruction. It’s like handing over the keys to your digital fortress to a complete stranger!

Put simply

Think of it like a delivery truck making an unauthorized stop and dropping off mysterious packages at your office. If no one checks the contents, who knows what chaos could ensue! This out-of-bounds write flaw allows attackers to write past the end of a buffer, leading to arbitrary code execution in affected versions of Adobe Acrobat and Reader. This can occur due to insufficient validation of input data.

What to do

If exploited, this vulnerability could lead to an attacker running any code they desire on your system, leaving your sensitive data vulnerable to theft or destruction. It’s like handing over the keys to your digital fortress to a complete stranger! Update Adobe Acrobat and Reader to the latest versions immediately to prevent exploitation. Keep an eye on your software updates to ensure you're running the most secure versions available. 🛡️ You've got this! By taking these steps, you're on your way to securing your digital realm! 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03990 · 90.5th percentile
Published
2019-05-24T18:24Z
EPSS history
Timeline
  • 24 MAY 18:24Z
    Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier…
    cvelistv5