PT-2019-3908 · Adobe · Acrobat+1

Publicado

2019-05-14

·

Atualizado

2019-08-21

·

CVE-2019-7784

CVSS v3.1

10

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions prior to 2019.010.20100 Adobe Acrobat versions prior to 2019.010.20099 Adobe Acrobat versions prior to 2017.011.30140 Adobe Acrobat versions prior to 2017.011.30138 Adobe Acrobat versions prior to 2015.006.30495 Adobe Acrobat versions prior to 2015.006.30493 Adobe Acrobat Reader versions prior to 2019.010.20100 Adobe Acrobat Reader versions prior to 2019.010.20099 Adobe Acrobat Reader versions prior to 2017.011.30140 Adobe Acrobat Reader versions prior to 2017.011.30138 Adobe Acrobat Reader versions prior to 2015.006.30495 Adobe Acrobat Reader versions prior to 2015.006.30493
Description The issue is related to a double free vulnerability. This could allow a remote attacker to execute arbitrary code.
Recommendations For Adobe Acrobat and Reader versions prior to 2019.010.20100, update to a version later than 2019.010.20100. For Adobe Acrobat and Reader versions prior to 2019.010.20099, update to a version later than 2019.010.20099. For Adobe Acrobat and Reader versions prior to 2017.011.30140, update to a version later than 2017.011.30140. For Adobe Acrobat and Reader versions prior to 2017.011.30138, update to a version later than 2017.011.30138. For Adobe Acrobat and Reader versions prior to 2015.006.30495, update to a version later than 2015.006.30495. For Adobe Acrobat and Reader versions prior to 2015.006.30493, update to a version later than 2015.006.30493.

Correção

Double Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-415

Identificadores relacionados

BDU:2019-04353
CVE-2019-7784

Produtos afetados

Acrobat
Acrobat Reader