CVE-2019-8199

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and…

published October 17, 2019

CVSS
—
EPSS
4%
Percentile
91.0
In the wild
Unconfirmed
What it is

⚠️ An out-of-bounds write in Adobe Acrobat and Reader could have attackers executing their code as easily as ordering a pizza! 🍕 Think of it like a restaurant that takes your order but allows staff to go into the kitchen and cook whatever they want without checking your order first. That’s how this vulnerability could lead to arbitrary code execution. If exploited, an attacker could run malicious code on a victim's machine, potentially leading to data breaches or total system compromise. It’s a dangerous situation where the attacker essentially takes over, leaving the user vulnerable to all sorts of nasty surprises.

Put simply

Think of it like a restaurant that takes your order but allows staff to go into the kitchen and cook whatever they want without checking your order first. That’s how this vulnerability could lead to arbitrary code execution. This out-of-bounds write vulnerability occurs when software writes data outside the bounds of allocated memory, allowing attackers to manipulate the program's execution flow and run arbitrary code.

What to do

If exploited, an attacker could run malicious code on a victim's machine, potentially leading to data breaches or total system compromise. It’s a dangerous situation where the attacker essentially takes over, leaving the user vulnerable to all sorts of nasty surprises. To protect yourself, update Adobe Acrobat and Reader to versions later than 2019.012.20041, 2017.011.30149, or 2015.006.30504. Regularly check for software updates and apply any security patches as soon as they are available. You’ve got this! Keep your software updated and you’ll be well on your way to securing your digital space! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04263 · 91.0th percentile
Published
2019-10-17T20:23Z
EPSS history
Timeline
  • 17 OCT 20:23Z
    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and…
    cvelistv5