PT-2019-3908 · Adobe · Acrobat+1

Published

2019-05-14

·

Updated

2019-08-21

·

CVE-2019-7784

CVSS v3.1

10

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions prior to 2019.010.20100 Adobe Acrobat versions prior to 2019.010.20099 Adobe Acrobat versions prior to 2017.011.30140 Adobe Acrobat versions prior to 2017.011.30138 Adobe Acrobat versions prior to 2015.006.30495 Adobe Acrobat versions prior to 2015.006.30493 Adobe Acrobat Reader versions prior to 2019.010.20100 Adobe Acrobat Reader versions prior to 2019.010.20099 Adobe Acrobat Reader versions prior to 2017.011.30140 Adobe Acrobat Reader versions prior to 2017.011.30138 Adobe Acrobat Reader versions prior to 2015.006.30495 Adobe Acrobat Reader versions prior to 2015.006.30493
Description The issue is related to a double free vulnerability. This could allow a remote attacker to execute arbitrary code.
Recommendations For Adobe Acrobat and Reader versions prior to 2019.010.20100, update to a version later than 2019.010.20100. For Adobe Acrobat and Reader versions prior to 2019.010.20099, update to a version later than 2019.010.20099. For Adobe Acrobat and Reader versions prior to 2017.011.30140, update to a version later than 2017.011.30140. For Adobe Acrobat and Reader versions prior to 2017.011.30138, update to a version later than 2017.011.30138. For Adobe Acrobat and Reader versions prior to 2015.006.30495, update to a version later than 2015.006.30495. For Adobe Acrobat and Reader versions prior to 2015.006.30493, update to a version later than 2015.006.30493.

Fix

Double Free

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-415

Related Identifiers

BDU:2019-04353
CVE-2019-7784

Affected Products

Acrobat
Acrobat Reader