CVE-2019-7113

Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier…

published May 23, 2019

CVSS
—
EPSS
6%
Percentile
93.6
In the wild
Unconfirmed
What it is

⚠️ A heap overflow in Adobe Acrobat could turn your PDF reader into an unwelcome guest at your digital party! 📥 Think of heap overflow as a crowded restaurant kitchen where orders pile up without checking if they fit — eventually, it spills over, causing chaos! 🍽️ If exploited, an attacker could execute arbitrary code on your machine, potentially leading to total control over your system. This could mean accessing sensitive data, installing malware, or disrupting your workflow, making it a frustrating experience for any user.

Put simply

Think of heap overflow as a crowded restaurant kitchen where orders pile up without checking if they fit — eventually, it spills over, causing chaos! 🍽️ This vulnerability arises in Adobe Acrobat and Reader versions 2019.010.20098 and earlier, allowing attackers to manipulate the heap memory, leading to potential code execution when a specially crafted PDF is opened.

What to do

If exploited, an attacker could execute arbitrary code on your machine, potentially leading to total control over your system. This could mean accessing sensitive data, installing malware, or disrupting your workflow, making it a frustrating experience for any user. Update to the latest versions of Adobe Acrobat and Reader immediately. Ensure all users are running versions 2019.010.20099 or later, as well as proper security measures to block malicious PDFs. Regularly audit your software to ensure you're protected! You’ve got this! Stay vigilant and secure your systems with these updates! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06334 · 93.6th percentile
Published
2019-05-23T16:52Z
EPSS history
Timeline
  • 23 MAY 16:52Z
    Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier…
    cvelistv5