CVE-2019-8022

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier…

published August 20, 2019

CVSS
—
EPSS
4%
Percentile
89.9
In the wild
Unconfirmed
What it is

⚠️ A crafty out-of-bounds write vulnerability could turn your trusted Adobe Acrobat into a playground for attackers! 🔥 It's like a waiter forgetting to check the menu before making a dish, leading to a surprise ingredient being added that could ruin the meal. In this case, the application could execute unexpected code and cause some serious havoc. Exploitation of this vulnerability allows an attacker to run arbitrary code on the victim's system, potentially leading to unauthorized access, data leakage, or even a complete system takeover. They could craft a malicious PDF that takes control without you even realizing you’ve opened a Pandora's box!

Put simply

It's like a waiter forgetting to check the menu before making a dish, leading to a surprise ingredient being added that could ruin the meal. In this case, the application could execute unexpected code and cause some serious havoc. This out-of-bounds write vulnerability exists when Adobe Acrobat and Reader fails to properly handle input data, allowing an attacker to overwrite memory locations and execute arbitrary code.

What to do

Exploitation of this vulnerability allows an attacker to run arbitrary code on the victim's system, potentially leading to unauthorized access, data leakage, or even a complete system takeover. They could craft a malicious PDF that takes control without you even realizing you’ve opened a Pandora's box! To protect yourself, ensure you update to the latest version of Adobe Acrobat or Reader, which addresses this issue. Regularly check for patches and updates to keep your software secure. Don't skip those updates! You've got this! Stay vigilant, update your software, and you'll be on your way to keeping your system secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03795 · 89.9th percentile
Published
2019-08-20T19:46Z
EPSS history
Timeline
  • 20 AUG 19:46Z
    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier…
    cvelistv5