PT-2019-5427 · Adobe · Acrobat+5

Published

2019-10-15

·

Updated

2021-09-08

·

CVE-2019-8205

CVSS v3.1

10

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions prior to 2019.012.20040 Adobe Acrobat Reader versions prior to 2019.012.20040 Adobe Acrobat 2017 versions prior to 2017.011.30148 Adobe Acrobat Reader 2017 versions prior to 2017.011.30148 Adobe Acrobat 2015 versions prior to 2015.006.30503 Adobe Acrobat Reader 2015 versions prior to 2015.006.30503
Description The issue is related to an untrusted pointer dereference vulnerability. This vulnerability can be exploited by a remote attacker to execute arbitrary code in the context of the current user.
Recommendations For Adobe Acrobat versions prior to 2019.012.20040, update to version 2019.012.20040 or later. For Adobe Acrobat Reader versions prior to 2019.012.20040, update to version 2019.012.20040 or later. For Adobe Acrobat 2017 versions prior to 2017.011.30148, update to version 2017.011.30148 or later. For Adobe Acrobat Reader 2017 versions prior to 2017.011.30148, update to version 2017.011.30148 or later. For Adobe Acrobat 2015 versions prior to 2015.006.30503, update to version 2015.006.30503 or later. For Adobe Acrobat Reader 2015 versions prior to 2015.006.30503, update to version 2015.006.30503 or later.

Fix

Buffer Overflow

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-119CWE-476

Related Identifiers

BDU:2020-03134
CVE-2019-8205

Affected Products

Acrobat
Acrobat 2015
Acrobat 2017
Acrobat Reader
Acrobat Reader 2015
Acrobat Reader 2017