CVE-2019-7118

Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier…

published May 23, 2019

CVSS
—
EPSS
6%
Percentile
93.1
In the wild
Unconfirmed
What it is

⚠️ An out-of-bounds write vulnerability in Adobe Acrobat and Reader could let an attacker run rogue code — think of it like a restaurant chef serving orders they never received! 🍽️ Imagine a chef who starts cooking meals based on scribbled notes instead of the official orders. This out-of-bounds write flaw allows attackers to manipulate memory in Acrobat, leading to arbitrary code execution — a recipe for disaster! If successfully exploited, this vulnerability could let malicious actors execute any code they desire on your system. This means they could steal sensitive data, modify files, or even take control of your machine, turning your trusted software into an unwelcome intruder!

Put simply

Imagine a chef who starts cooking meals based on scribbled notes instead of the official orders. This out-of-bounds write flaw allows attackers to manipulate memory in Acrobat, leading to arbitrary code execution — a recipe for disaster! This vulnerability emerges from how Adobe Acrobat and Reader handle memory, specifically allowing too much data to be written outside allocated boundaries, which can then be manipulated to execute arbitrary code.

What to do

If successfully exploited, this vulnerability could let malicious actors execute any code they desire on your system. This means they could steal sensitive data, modify files, or even take control of your machine, turning your trusted software into an unwelcome intruder! To secure your environment, update Adobe Acrobat and Reader to the latest versions as soon as possible. Check your systems for versions 2019.010.20098 or earlier, and ensure all installations are patched. Regularly review update policies to prevent future vulnerabilities! You've got this! By following these steps, you're taking a heroic stance against security threats! 🦸

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05842 · 93.1th percentile
Published
2019-05-23T17:12Z
EPSS history
Timeline
  • 23 MAY 17:12Z
    Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier…
    cvelistv5