CVE-2019-8048

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier…

published August 20, 2019

CVSS
—
EPSS
35%
Percentile
98.4
In the wild
Unconfirmed
What it is

⚠️ A minor oversight in buffer handling opens the door to chaos. Attackers can execute arbitrary code on Adobe Acrobat and Reader versions 2019.012.20035 and earlier — that's like a sneaky waiter taking your order and serving someone else entirely! Imagine a restaurant where the staff mislabels the orders, leading to someone getting a dish they never requested. This buffer error lets an attacker present code that the application treats as valid — a recipe for disaster! If exploited, an attacker could run any code they choose on your system, potentially stealing sensitive information or causing severe disruptions. It's a wild invitation for trouble that you definitely don’t want to extend!

Put simply

Imagine a restaurant where the staff mislabels the orders, leading to someone getting a dish they never requested. This buffer error lets an attacker present code that the application treats as valid — a recipe for disaster! This vulnerability arises from improper handling of buffer sizes in Adobe Acrobat and Reader, allowing attackers to manipulate memory and execute arbitrary commands. Versions affected include 2019.012.20035 or earlier, and several others, marking a serious risk for users.

What to do

If exploited, an attacker could run any code they choose on your system, potentially stealing sensitive information or causing severe disruptions. It's a wild invitation for trouble that you definitely don’t want to extend! To protect yourself, update Adobe Acrobat and Reader to the latest version immediately. Keeping your software up-to-date is crucial for defending against these vulnerabilities! You can tackle this! By applying the update, you'll enhance your security posture in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.34560 · 98.4th percentile
Published
2019-08-20T19:59Z
EPSS history
Timeline
  • 20 AUG 19:59Z
    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier…
    cvelistv5