CVE-2019-8029

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier…

published August 20, 2019

CVSS
—
EPSS
5%
Percentile
92.3
In the wild
Unconfirmed
What it is

🚨 A crafty bit of code is lying in wait! This use after free vulnerability in Adobe Acrobat and Reader could spell disaster if exploited, allowing attackers to run malicious code. 🔥 Think of it like a restaurant serving food from a table that was already cleared — you might end up with something you didn’t order, and definitely don’t want! In this case, the vulnerable versions are still serving up potential exploits, even though the dishes should have been off the menu. An attacker could take advantage of this vulnerability to execute arbitrary code on your system, leading to potential data theft, unauthorized access, or worse. It's an open invitation for mischief, so keeping your software updated is crucial!

Put simply

Think of it like a restaurant serving food from a table that was already cleared — you might end up with something you didn’t order, and definitely don’t want! In this case, the vulnerable versions are still serving up potential exploits, even though the dishes should have been off the menu. This vulnerability occurs when Adobe Acrobat and Reader doesn't properly manage memory allocation, causing it to continue using pointers to freed memory. This oversight can allow an attacker to inject and run their own malicious code.

What to do

An attacker could take advantage of this vulnerability to execute arbitrary code on your system, leading to potential data theft, unauthorized access, or worse. It's an open invitation for mischief, so keeping your software updated is crucial! To protect yourself, update Adobe Acrobat and Reader to version 2019.012.20036 or later, as well as 2017.011.30144 or later, and 2015.006.30499 or later. Regularly check for updates to ensure you're always using the most secure version! You've got this! By following these steps, you'll have your defenses up in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05041 · 92.3th percentile
Published
2019-08-20T19:49Z
EPSS history
Timeline
  • 20 AUG 19:49Z
    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier…
    cvelistv5