CVE-2019-8195

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and…

published October 17, 2019

CVSS
—
EPSS
23%
Percentile
97.7
In the wild
Unconfirmed
What it is

🚨 An untrusted pointer dereference in Adobe Acrobat could let attackers execute arbitrary code, like a magician pulling a rabbit out of an empty hat. 🎩 Imagine a restaurant chef trusting a delivery order that had no clear address — they might whip up a dish with ingredients nobody wanted! Here, the vulnerability allows unexpected code to run, spinning out of control because the program doesn’t question where it came from. If exploited, an attacker could gain full control over the affected system, potentially leading to data theft, system corruption, or installing malicious software. The consequences could be catastrophic, opening the door to unauthorized access and data breaches.

Put simply

Imagine a restaurant chef trusting a delivery order that had no clear address — they might whip up a dish with ingredients nobody wanted! Here, the vulnerability allows unexpected code to run, spinning out of control because the program doesn’t question where it came from. This vulnerability arises from improper handling of memory references, allowing access to arbitrary memory locations. It can be exploited to execute any code injected by an attacker, compromising the integrity of the application.

What to do

If exploited, an attacker could gain full control over the affected system, potentially leading to data theft, system corruption, or installing malicious software. The consequences could be catastrophic, opening the door to unauthorized access and data breaches. To protect yourself, update Adobe Acrobat and Reader to the latest versions available. Specifically, ensure you're on version 2019.012.20041 or later, and consider implementing strong security measures like firewall rules and user input validation to safeguard against potential attacks. You've got this! By staying updated and vigilant, you'll keep your systems secure. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.22886 · 97.7th percentile
Published
2019-10-17T20:20Z
EPSS history
Timeline
  • 17 OCT 20:20Z
    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and…
    cvelistv5