PT-2019-6040 · Adobe · Acrobat+1
Mr_Me
+1
·
Publicado
2019-05-14
·
Atualizado
2019-08-21
·
CVE-2019-7145
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Adobe Acrobat versions 2019.010.20100 and earlier
Adobe Acrobat versions 2017.011.30140 and earlier
Adobe Acrobat versions 2015.006.30495 and earlier
Adobe Reader versions 2019.010.20100 and earlier
Adobe Reader versions 2017.011.30140 and earlier
Adobe Reader versions 2015.006.30495 and earlier
Description
The issue is related to an out-of-bounds read vulnerability in Adobe Acrobat and Reader. This vulnerability could allow a remote attacker to obtain sensitive information by exploiting the out-of-bounds read operation in memory. The vulnerability is associated with the parsing of PostScript files.
Recommendations
For Adobe Acrobat and Reader versions 2019.010.20100 and earlier, update to a version later than 2019.010.20100 to resolve the issue.
For Adobe Acrobat and Reader versions 2017.011.30140 and earlier, update to a version later than 2017.011.30140 to resolve the issue.
For Adobe Acrobat and Reader versions 2015.006.30495 and earlier, update to a version later than 2015.006.30495 to resolve the issue.
As a temporary workaround, consider restricting access to PostScript file parsing functionality in Adobe Acrobat and Reader until a patch is available.
Correção
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Acrobat
Reader