PT-2019-6005 · Adobe · Acrobat+1

Published 2019-04-09 · Updated 2019-08-21 · CVE-2019-7114

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions prior to 2019.010.20098 Adobe Reader versions prior to 2019.010.20098 Adobe Acrobat versions prior to 2017.011.30127 Adobe Acrobat versions prior to 2015.006.30482

Description The issue is related to an out-of-bounds read in memory, which can be exploited by an attacker to gain unauthorized access to protected information in the context of the current user. This can be achieved by using a specially crafted PDF file. The estimated number of potentially affected devices and details about real-world incidents are not provided.

Recommendations For Adobe Acrobat and Reader versions prior to 2019.010.20098, update to a version later than 2019.010.20098 to resolve the issue. For Adobe Acrobat versions prior to 2017.011.30127, update to a version later than 2017.011.30127 to resolve the issue. For Adobe Acrobat versions prior to 2015.006.30482, update to a version later than 2015.006.30482 to resolve the issue. As a temporary workaround, consider avoiding the use of Adobe Acrobat and Reader to open PDF files from untrusted sources until a patch is available.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2021-04290

CVE-2019-7114

Affected Products

Acrobat

Reader

References · 5

• https://osv.dev/vulnerability/CVE-2019-7114 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-7114 · Security Note
• https://helpx.adobe.com/security/products/acrobat/apsb19-17.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-04290 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7114 · Note