10

CVE-2018-4917

Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, 2015.006.30394 and earlier have an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Acrobat 2017 Version >= 17.011.30070 < 17.011.30078
   Apple ≫ macOS Version-
   Microsoft ≫ Windows Version-
Adobe ≫ Acrobat Dc SwEditionclassic Version >= 15.006.30394 < 15.006.30413
   Apple ≫ macOS Version-
   Microsoft ≫ Windows Version-
Adobe ≫ Acrobat Dc SwEditioncontinuous Version >= 18.009.20050 < 18.011.20035
   Apple ≫ macOS Version-
   Microsoft ≫ Windows Version-
Adobe ≫ Acrobat Reader 2017 Version >= 17.011.30070 < 17.011.30078
   Apple ≫ macOS Version-
   Microsoft ≫ Windows Version-
Adobe ≫ Acrobat Reader Dc SwEditionclassic Version >= 15.006.30394 < 15.006.30413
   Apple ≫ macOS Version-
   Microsoft ≫ Windows Version-
Adobe ≫ Acrobat Reader Dc SwEditioncontinuous Version >= 18.009.20050 < 18.011.20035
   Apple ≫ macOS Version-
   Microsoft ≫ Windows Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.41% 0.868
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

http://www.securitytracker.com/id/1040364
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/102992
Third Party Advisory
VDB Entry