PT-2019-5607 · Adobe · Acrobat+1
Publicado
2019-02-12
·
Atualizado
2021-09-08
·
CVE-2019-7054
CVSS v3.1
10
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Adobe Acrobat and Reader versions 2019.010.20069 and earlier
Adobe Acrobat and Reader versions 2017.011.30113 and earlier
Adobe Acrobat and Reader versions 2015.006.30464 and earlier
Description
The issue is related to an untrusted pointer dereference, which could lead to arbitrary code execution if successfully exploited. This means an attacker could potentially run arbitrary code in the context of the current user. The vulnerability is associated with the Adobe Acrobat and Reader products, specifically affecting their ability to handle certain operations, potentially allowing a remote attacker to execute code.
Recommendations
For Adobe Acrobat and Reader versions 2019.010.20069 and earlier, update to a version later than 2019.010.20069 to resolve the issue.
For Adobe Acrobat and Reader versions 2017.011.30113 and earlier, update to a version later than 2017.011.30113 to resolve the issue.
For Adobe Acrobat and Reader versions 2015.006.30464 and earlier, update to a version later than 2015.006.30464 to resolve the issue.
As a temporary workaround, consider restricting the use of Adobe Acrobat and Reader until a patch is available.
Correção
Buffer Overflow
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Acrobat
Reader