PT-2019-6005 · Adobe · Acrobat+1
Publicado
2019-04-09
·
Atualizado
2019-08-21
·
CVE-2019-7114
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Adobe Acrobat versions prior to 2019.010.20098
Adobe Reader versions prior to 2019.010.20098
Adobe Acrobat versions prior to 2017.011.30127
Adobe Acrobat versions prior to 2015.006.30482
Description
The issue is related to an out-of-bounds read in memory, which can be exploited by an attacker to gain unauthorized access to protected information in the context of the current user. This can be achieved by using a specially crafted PDF file. The estimated number of potentially affected devices and details about real-world incidents are not provided.
Recommendations
For Adobe Acrobat and Reader versions prior to 2019.010.20098, update to a version later than 2019.010.20098 to resolve the issue.
For Adobe Acrobat versions prior to 2017.011.30127, update to a version later than 2017.011.30127 to resolve the issue.
For Adobe Acrobat versions prior to 2015.006.30482, update to a version later than 2015.006.30482 to resolve the issue.
As a temporary workaround, consider avoiding the use of Adobe Acrobat and Reader to open PDF files from untrusted sources until a patch is available.
Correção
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Acrobat
Reader