10

CVE-2018-4917

Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, 2015.006.30394 and earlier have an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Acrobat 2017 Version >= 17.011.30070 < 17.011.30078
   Apple ≫ macOS Version -
   Microsoft ≫ Windows Version -
Adobe ≫ Acrobat Dc SwEdition classic Version >= 15.006.30394 < 15.006.30413
   Apple ≫ macOS Version -
   Microsoft ≫ Windows Version -
Adobe ≫ Acrobat Dc SwEdition continuous Version >= 18.009.20050 < 18.011.20035
   Apple ≫ macOS Version -
   Microsoft ≫ Windows Version -
Adobe ≫ Acrobat Reader 2017 Version >= 17.011.30070 < 17.011.30078
   Apple ≫ macOS Version -
   Microsoft ≫ Windows Version -
Adobe ≫ Acrobat Reader Dc SwEdition classic Version >= 15.006.30394 < 15.006.30413
   Apple ≫ macOS Version -
   Microsoft ≫ Windows Version -
Adobe ≫ Acrobat Reader Dc SwEdition continuous Version >= 18.009.20050 < 18.011.20035
   Apple ≫ macOS Version -
   Microsoft ≫ Windows Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 17.63% 0.968
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

http://www.securitytracker.com/id/1040364
Third Party Advisory
VDB Entry
https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
Vendor Advisory
http://www.securityfocus.com/bid/102992
Third Party Advisory
VDB Entry