PT-2018-3855 · Adobe · Acrobat+1
Netanel Ben-Simon
+1
·
Publicado
2018-10-01
·
Atualizado
2020-02-24
·
CVE-2018-15927
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Adobe Acrobat versions 2018.011.20063 and earlier
Adobe Acrobat versions 2017.011.30102 and earlier
Adobe Acrobat versions 2015.006.30452 and earlier
Adobe Acrobat Reader versions 2018.011.20063 and earlier
Adobe Acrobat Reader versions 2017.011.30102 and earlier
Adobe Acrobat Reader versions 2015.006.30452 and earlier
Description
The issue is related to an out-of-bounds read vulnerability. This could lead to information disclosure if successfully exploited. The vulnerability is associated with the ImageConversion.api file in Adobe Acrobat and Reader, allowing an attacker to obtain sensitive information.
Recommendations
For Adobe Acrobat and Reader versions 2018.011.20063 and earlier, update to a version later than 2018.011.20063.
For Adobe Acrobat and Reader versions 2017.011.30102 and earlier, update to a version later than 2017.011.30102.
For Adobe Acrobat and Reader versions 2015.006.30452 and earlier, update to a version later than 2015.006.30452.
As a temporary workaround, consider restricting access to the ImageConversion.api file until a patch is available.
Correção
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Acrobat
Acrobat Reader