CVE-2019-7965

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier…

published August 20, 2019

CVSS
—
EPSS
4%
Percentile
91.3
In the wild
Unconfirmed
What it is

🚨 An out-of-bounds write in Adobe Acrobat could let an attacker run arbitrary code, and it’s lurking in several versions! 🔥 Think of it like a construction worker who builds a wall that accidentally extends beyond the blueprint — once that wall is up, it can cause chaos in the entire building, leading to unexpected results. Similarly, this vulnerability allows code to run where it shouldn't, potentially bringing down the whole system. If exploited, a malicious actor could gain control over affected systems, executing any arbitrary code they desire. This could lead to disastrous consequences, like stealing sensitive data, spreading malware, or even locking users out completely. The potential fallout is absolutely devastating!

Put simply

Think of it like a construction worker who builds a wall that accidentally extends beyond the blueprint — once that wall is up, it can cause chaos in the entire building, leading to unexpected results. Similarly, this vulnerability allows code to run where it shouldn't, potentially bringing down the whole system. This out-of-bounds write vulnerability in Adobe Acrobat and Reader allows attackers to manipulate memory outside its intended boundaries, leading to arbitrary code execution. This means they can effectively run malicious software on your device without authorization.

What to do

If exploited, a malicious actor could gain control over affected systems, executing any arbitrary code they desire. This could lead to disastrous consequences, like stealing sensitive data, spreading malware, or even locking users out completely. The potential fallout is absolutely devastating! To protect yourself, immediately update Adobe Acrobat and Reader to the latest versions. Ensure that you're running versions post-2019.012.20036 and monitor for any patches released for earlier impacted versions. Staying vigilant with updates is key! You've got this! By taking these steps, you'll help secure your systems and stay one step ahead of threats. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04416 · 91.3th percentile
Published
2019-08-20T19:31Z
EPSS history
Timeline
  • 20 AUG 19:31Z
    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier…
    cvelistv5