CVE-2019-8006

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier…

published August 20, 2019

CVSS
—
EPSS
4%
Percentile
91.2
In the wild
Unconfirmed
What it is

⚠️ A sneaky untrusted pointer dereference is lurking in Adobe Acrobat and Reader, potentially opening the door for arbitrary code execution! 🔥 Think of it like a waiter taking orders without verifying that the kitchen can actually prepare them — if the order's not checked properly, a bad dish could ruin the dining experience! If this vulnerability is exploited, an attacker could send malicious commands, leading to unauthorized actions like stealing data or installing harmful software on your system. It’s a recipe for disaster that you definitely want to avoid!

Put simply

Think of it like a waiter taking orders without verifying that the kitchen can actually prepare them — if the order's not checked properly, a bad dish could ruin the dining experience! This vulnerability occurs when Adobe Acrobat and Reader fail to properly validate pointers, allowing attackers to leverage these flaws to execute arbitrary code on a victim's machine.

What to do

If this vulnerability is exploited, an attacker could send malicious commands, leading to unauthorized actions like stealing data or installing harmful software on your system. It’s a recipe for disaster that you definitely want to avoid! To safeguard against this issue, it's critical to upgrade your Adobe Acrobat and Reader to the latest versions. Ensure you're running at least 2019.012.20036, 2017.011.30144, or 2015.006.30499, as these patches address this vulnerability effectively. You've got this! Stay vigilant and follow these steps to secure your system and keep those pesky vulnerabilities at bay! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04334 · 91.2th percentile
Published
2019-08-20T19:38Z
EPSS history
Timeline
  • 20 AUG 19:38Z
    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier…
    cvelistv5