Multiple vulnerabilities in Adobe Arcobat&Reader

Description

Multiple serious vulnerabilities have been found in Adobe Acrobat and Adobe Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code and gain priveleges.

Below is a complete list of vulnerabilities:

1. Use-after-free vulnerabilities can be exploited to execute arbitrary code;
2. Heap buffer overflow vulnerabilities can be exploited to execute arbitrary code;
3. Out-of-bounds write vulnerabilities can be exploited to execute arbitrary code;
4. Security Mitigation Bypass vulnerability can be exploited remotely to gain priveleges;
5. Out-of-bounds read vulnerabilities can be exploited remotely to execute arbitrary code;

Original advisories

• Adobe Security Bulletin

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Adobe-Acrobat
• Adobe-Acrobat-Reader-DC-Continuous
• Adobe-Acrobat-Reader-DC-Classic
• Adobe-Acrobat-DC-Continuous
• Adobe-Acrobat-DC-Classic
• Adobe-Acrobat-Reader-2017
• Adobe-Acrobat-2017
• Adobe-Acrobat-Reader

CVE list

• CVE-2018-4872
  critical
• CVE-2018-4890
  critical
• CVE-2018-4904
  critical
• CVE-2018-4910
  critical
• CVE-2018-4917
  critical
• CVE-2018-4888
  critical
• CVE-2018-4892
  critical
• CVE-2018-4902
  critical
• CVE-2018-4911
  critical
• CVE-2018-4913
  critical
• CVE-2018-4879
  critical
• CVE-2018-4895
  critical
• CVE-2018-4898
  critical
• CVE-2018-4901
  critical
• CVE-2018-4915
  critical
• CVE-2018-4916
  critical
• CVE-2018-4918
  critical
• CVE-2018-4880
  high
• CVE-2018-4881
  high
• CVE-2018-4882
  high
• CVE-2018-4883
  high
• CVE-2018-4884
  high
• CVE-2018-4885
  high
• CVE-2018-4886
  high
• CVE-2018-4887
  high
• CVE-2018-4889
  high
• CVE-2018-4891
  high
• CVE-2018-4893
  high
• CVE-2018-4894
  high
• CVE-2018-4896
  high
• CVE-2018-4897
  high
• CVE-2018-4899
  high
• CVE-2018-4900
  high
• CVE-2018-4903
  high
• CVE-2018-4905
  high
• CVE-2018-4906
  high
• CVE-2018-4907
  high
• CVE-2018-4908
  high
• CVE-2018-4909
  high
• CVE-2018-4912
  high
• CVE-2018-4914
  high
• CVE-2018-4998
  critical
• CVE-2018-4997
  critical
• CVE-2018-4999
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com