PT-2018-3852 · Adobe · Acrobat+1

Netanel Ben-Simon + 1 · Published 2018-10-01 · Updated 2020-02-24 · CVE-2018-12873

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions prior to 2018.011.20063 Adobe Acrobat versions prior to 2017.011.30102 Adobe Acrobat versions prior to 2015.006.30452 Adobe Acrobat Reader versions prior to 2018.011.20063 Adobe Acrobat Reader versions prior to 2017.011.30102 Adobe Acrobat Reader versions prior to 2015.006.30452

Description The issue is related to an out-of-bounds read in memory, which could allow an attacker to disclose protected information. Successful exploitation of this issue may lead to information disclosure.

Recommendations For Adobe Acrobat versions prior to 2018.011.20063, update to version 2018.011.20063 or later. For Adobe Acrobat versions prior to 2017.011.30102, update to version 2017.011.30102 or later. For Adobe Acrobat versions prior to 2015.006.30452, update to version 2015.006.30452 or later. For Adobe Acrobat Reader versions prior to 2018.011.20063, update to version 2018.011.20063 or later. For Adobe Acrobat Reader versions prior to 2017.011.30102, update to version 2017.011.30102 or later. For Adobe Acrobat Reader versions prior to 2015.006.30452, update to version 2015.006.30452 or later.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2022-06978

CVE-2018-12873

Affected Products

Acrobat

Acrobat Reader

References · 10

• https://helpx.adobe.com/security/products/acrobat/apsb18-30.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-06978 · Security Note
• https://osv.dev/vulnerability/CVE-2018-12873 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-12873 · Security Note
• https://cpr-zero.checkpoint.com/vulns/cprid-2079 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12873 · Note
• http://securityfocus.com/bid/105439 · Note
• http://securitytracker.com/id/1041809 · Note
• https://research.checkpoint.com/2018/50-adobe-cves-in-50-days · Note
• https://bugtraq.securityfocus.com/archive · Note