CVE-2019-8045

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier…

published August 20, 2019

CVSS
—
EPSS
16%
Percentile
96.9
In the wild
Unconfirmed
What it is

⚠️ A sneaky little bug in Adobe Acrobat could allow attackers to execute arbitrary code with just a simple trick! 📄💥 Think of it like a lunch order that’s completely wrong because the restaurant takes a call from someone pretending to be you — they trust the order without checking who really placed it. This vulnerability lets attackers manipulate the system by leveraging untrusted pointers, leading to unintended consequences. If successfully exploited, an attacker could run any code they choose on a victim's machine! This could range from stealing sensitive documents to taking control of the entire system. The implications could be absolutely devastating if this vulnerability is left unaddressed.

Put simply

Think of it like a lunch order that’s completely wrong because the restaurant takes a call from someone pretending to be you — they trust the order without checking who really placed it. This vulnerability lets attackers manipulate the system by leveraging untrusted pointers, leading to unintended consequences. This vulnerability arises from untrusted pointer dereference, where Adobe Acrobat and Reader do not properly validate user input. This allows attackers to exploit the flaw and execute arbitrary code remotely.

What to do

If successfully exploited, an attacker could run any code they choose on a victim's machine! This could range from stealing sensitive documents to taking control of the entire system. The implications could be absolutely devastating if this vulnerability is left unaddressed. To protect yourself, make sure to update Adobe Acrobat and Reader to the latest version available. Monitor for security updates and consider implementing additional security measures, like running applications in a sandboxed environment. Stay vigilant! You've got this! By keeping your software updated, you're taking a huge step towards securing your system. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.16018 · 96.9th percentile
Published
2019-08-20T19:58Z
EPSS history
Timeline
  • 20 AUG 19:58Z
    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier…
    cvelistv5