CVE-2019-8205

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and…

published October 17, 2019

CVSS
—
EPSS
4%
Percentile
90.7
In the wild
Unconfirmed
What it is

🚨 Watch out if you're using Adobe Acrobat or Reader! A sneaky untrusted pointer dereference vulnerability could let attackers execute arbitrary code! 🔥 Think of it like a restaurant where the chef decides to cook with unfamiliar ingredients without checking their quality. If those ingredients are bad, it could ruin the entire meal — here, it could lead to a devastating security breach! If an attacker exploits this vulnerability, they could execute any code they desire on your system, potentially leading to data theft, system compromise, or worse! Users could unwittingly hand over the keys to their digital castle, making it a scenario that's not just risky, but downright alarming.

Put simply

Think of it like a restaurant where the chef decides to cook with unfamiliar ingredients without checking their quality. If those ingredients are bad, it could ruin the entire meal — here, it could lead to a devastating security breach! This vulnerability exists because Adobe Acrobat and Reader mishandle pointers, allowing an attacker to dereference an untrusted pointer leading to arbitrary code execution, which can occur without any user interaction.

What to do

If an attacker exploits this vulnerability, they could execute any code they desire on your system, potentially leading to data theft, system compromise, or worse! Users could unwittingly hand over the keys to their digital castle, making it a scenario that's not just risky, but downright alarming. To safeguard against this vulnerability, update Adobe Acrobat and Reader to the latest version immediately. Ensure all detected versions are patched and monitor for any updates from Adobe regarding this issue. You've got this! By following these steps, you'll be back in security hero mode in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04100 · 90.7th percentile
Published
2019-10-17T20:24Z
EPSS history
Timeline
  • 17 OCT 20:24Z
    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and…
    cvelistv5