CVE-2019-8061

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier…

published August 20, 2019

CVSS
—
EPSS
4%
Percentile
91.2
In the wild
Unconfirmed
What it is

🚨 A sneaky 'use after free' vulnerability is hiding in Adobe Acrobat and Reader versions before 2019.012.20035 — it's like trying to use a library book that the system thought was returned! 📚 Think of a checkout counter where a clerk forgets to mark a returned book as available. If someone tries to check it out again, they can sneak it away without anyone noticing. Similarly, this vulnerability allows an attacker to execute arbitrary code because the software doesn't properly manage memory after it's freed up. This could lead to a devastating situation where an attacker gains full control over the system, executing any code they wish. Imagine a library’s quiet reading room suddenly filling with chaos if someone could run any program! Your sensitive data could be at risk, along with the core functionality of the applications you trust.

Put simply

Think of a checkout counter where a clerk forgets to mark a returned book as available. If someone tries to check it out again, they can sneak it away without anyone noticing. Similarly, this vulnerability allows an attacker to execute arbitrary code because the software doesn't properly manage memory after it's freed up. CVE-2019-8061 is a 'use after free' vulnerability in Adobe Acrobat and Reader, where the program fails to properly manage memory after freeing it, which can lead to arbitrary code execution upon exploitation.

What to do

This could lead to a devastating situation where an attacker gains full control over the system, executing any code they wish. Imagine a library’s quiet reading room suddenly filling with chaos if someone could run any program! Your sensitive data could be at risk, along with the core functionality of the applications you trust. To mitigate this vulnerability, upgrade Adobe Acrobat and Reader to the latest version immediately. Regularly check for software updates and ensure your systems are patched against known vulnerabilities. You got this! Stay vigilant and keep your software updated to stay secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04334 · 91.2th percentile
Published
2019-08-20T20:08Z
EPSS history
Timeline
  • 20 AUG 20:08Z
    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier…
    cvelistv5