CVE-2019-7117

Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier…

published May 23, 2019

CVSS
—
EPSS
7%
Percentile
93.9
In the wild
Unconfirmed
What it is

⚠️ A type confusion vulnerability in Adobe Acrobat could let a crafty attacker slip malicious code right past your defenses! 🔥 Think of it like a restaurant that serves two very different dishes with the same name — if the chef gets confused, they might serve you something completely unexpected! If an attacker successfully exploits this vulnerability, they could execute arbitrary code on your system, potentially leading to data breaches or complete system control. Imagine a diner who ordered a salad but ended up with a deliciously dangerous mystery dish instead!

Put simply

Think of it like a restaurant that serves two very different dishes with the same name — if the chef gets confused, they might serve you something completely unexpected! This vulnerability arises from improper handling of data types, allowing an attacker to manipulate memory and run arbitrary code when the software processes untrusted input. It affects versions of Adobe Acrobat and Reader up to 2019.010.20098 and earlier.

What to do

If an attacker successfully exploits this vulnerability, they could execute arbitrary code on your system, potentially leading to data breaches or complete system control. Imagine a diner who ordered a salad but ended up with a deliciously dangerous mystery dish instead! To protect yourself, upgrade to the latest version of Adobe Acrobat or Reader. Additionally, make sure your software is configured to only accept trusted files and sources to minimize risk. You've got this! Follow these steps and keep your system safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06665 · 93.9th percentile
Published
2019-05-23T17:06Z
EPSS history
Timeline
  • 23 MAY 17:06Z
    Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier…
    cvelistv5