PT-2018-3666 · Adobe · Acrobat+3
Netanel Ben-Simon
+1
·
Publicado
2018-07-10
·
Atualizado
2020-02-13
·
CVE-2018-5063
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Adobe Acrobat and Reader versions 2018.011.20040 and earlier
Adobe Acrobat and Reader versions 2017.011.30080 and earlier
Adobe Acrobat and Reader versions 2015.006.30418 and earlier
Description
The issue is related to an out-of-bounds read, which could lead to information disclosure if successfully exploited. This allows a remote attacker to gain unauthorized access to protected information. The vulnerability is associated with the Adobe Acrobat Document Cloud and Acrobat Reader Document Cloud, and it involves an out-of-bounds operation in the memory buffer.
Recommendations
For versions 2018.011.20040 and earlier, update to a version later than 2018.011.20040 to resolve the issue.
For versions 2017.011.30080 and earlier, update to a version later than 2017.011.30080 to resolve the issue.
For versions 2015.006.30418 and earlier, update to a version later than 2015.006.30418 to resolve the issue.
As a temporary workaround, consider restricting access to sensitive information until a patch is available.
Correção
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Adobe Acrobat Reader Document Cloud
Acrobat
Acrobat Document Cloud
Reader