PT-2019-5993 · Adobe · Acrobat+1

Published 2019-05-14 · Updated 2020-08-24 · CVE-2019-7832

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions prior to 2019.012.20035 Adobe Acrobat Reader versions prior to 2019.012.20035 Adobe Acrobat versions prior to 2017.011.30143 Adobe Acrobat Reader versions prior to 2017.011.30143 Adobe Acrobat versions prior to 2015.006.30498 Adobe Acrobat Reader versions prior to 2015.006.30498

Description The issue is related to a heap overflow vulnerability and a use-after-free vulnerability in Adobe Acrobat and Reader. Successful exploitation could lead to arbitrary code execution. The vulnerability is also described as a buffer overflow in memory, which can be exploited by a remote attacker to execute arbitrary code.

Recommendations For Adobe Acrobat and Reader versions prior to 2019.012.20035, update to a version later than 2019.012.20035. For Adobe Acrobat and Reader versions prior to 2017.011.30143, update to a version later than 2017.011.30143. For Adobe Acrobat and Reader versions prior to 2015.006.30498, update to a version later than 2015.006.30498. As a temporary workaround, consider disabling the vulnerable functions until a patch is available. Restrict access to the vulnerable modules to minimize the risk of exploitation.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2021-04246

CVE-2019-7832

Affected Products

Acrobat

Acrobat Reader

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2019-7832 · Security Note
• https://bdu.fstec.ru/vul/2021-04246 · Security Note
• https://osv.dev/vulnerability/CVE-2019-7832 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7832 · Note
• https://helpx.adobe.com/security/products/acrobat/apsb19-41.html · Note
• https://helpx.adobe.com/security/products/acrobat/apsb19-18.html · Note