PT-2019-5988 · Adobe · Acrobat+1
Publicado
2019-05-14
·
Atualizado
2019-08-21
·
CVE-2019-7809
CVSS v2.0
7.1
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Adobe Acrobat versions 2019.010.20100 and earlier
Adobe Acrobat versions 2017.011.30140 and earlier
Adobe Acrobat versions 2015.006.30495 and earlier
Adobe Acrobat Reader versions 2019.010.20099 and earlier
Adobe Acrobat Reader versions 2017.011.30138 and earlier
Adobe Acrobat Reader versions 2015.006.30493 and earlier
Description
The issue is related to a use after free vulnerability in Adobe Acrobat and Reader. Successful exploitation could lead to arbitrary code execution, allowing an attacker to gain unauthorized access to protected information. This vulnerability is associated with the use of memory after it has been freed, which can be exploited by a remote attacker.
Recommendations
For Adobe Acrobat versions 2019.010.20100 and earlier, update to a version later than 2019.010.20100 to resolve the issue.
For Adobe Acrobat versions 2017.011.30140 and earlier, update to a version later than 2017.011.30140 to resolve the issue.
For Adobe Acrobat versions 2015.006.30495 and earlier, update to a version later than 2015.006.30495 to resolve the issue.
For Adobe Acrobat Reader versions 2019.010.20099 and earlier, update to a version later than 2019.010.20099 to resolve the issue.
For Adobe Acrobat Reader versions 2017.011.30138 and earlier, update to a version later than 2017.011.30138 to resolve the issue.
For Adobe Acrobat Reader versions 2015.006.30493 and earlier, update to a version later than 2015.006.30493 to resolve the issue.
Correção
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Acrobat
Acrobat Reader