CVE-2019-7791

Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier…

published May 22, 2019

CVSS
—
EPSS
7%
Percentile
93.8
In the wild
Unconfirmed
What it is

🚨 A pesky use after free vulnerability lurks in Adobe Acrobat and Reader that could let attackers run wild on your system! Think of it as a waiter serving a meal from an empty plate — they might accidentally spill leftover food that should have been discarded. If an attacker knows how to exploit this mix-up, they could inject their own malicious code into your system when it least expects it! If exploited, this could allow an attacker to execute arbitrary code on your machine, potentially leading to complete system compromise. Imagine your computer becoming a puppet, dancing to the whims of an unwelcome guest! That's a nightmare scenario for any user.

Put simply

Think of it as a waiter serving a meal from an empty plate — they might accidentally spill leftover food that should have been discarded. If an attacker knows how to exploit this mix-up, they could inject their own malicious code into your system when it least expects it! This vulnerability occurs when the application does not properly manage memory when handling certain operations, specifically leading to a state where memory can be accessed after it's been freed, allowing for arbitrary code execution.

What to do

If exploited, this could allow an attacker to execute arbitrary code on your machine, potentially leading to complete system compromise. Imagine your computer becoming a puppet, dancing to the whims of an unwelcome guest! That's a nightmare scenario for any user. To protect yourself, ensure you're running the latest versions of Adobe Acrobat and Reader. Update to at least version 2019.010.20101 or later, and regularly check for security patches. It's also wise to be cautious with any documents from untrusted sources! You've got this! Follow these steps, and you'll have your defenses up in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06525 · 93.8th percentile
Published
2019-05-22T13:57Z
EPSS history
Timeline
  • 22 MAY 13:57Z
    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier…
    cvelistv5