Multiple vulnerabilities in Adobe Acrobat and Acrobat Reader

Description

Multiple vulnerabilities were found in Adobe Acrobat and Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges.

Below is a complete list of vulnerabilities:

1. Multiple buffer errors vulnerabilities can be exploited remotely to execute arbitrary code;
2. Multiple data leakage vulnerabilities can be exploited remotely to obtain sensitive information;
3. Multiple double free vulnerabilities can be exploited remotely to execute arbitrary code;
4. Multiple integer overflow vulnerabilities can be exploited remotely to obtain sensitive information;
5. Multiple out-of-bounds read vulnerabilities can be exploited remotely to obtain sensitive information;
6. Multiple security bypass vulnerabilities can be exploited remotely to gain privileges;
7. Multiple out-of-bounds write vulnerabilities can be exploited remotely to execute arbitrary code;
8. Multiple type confusion vulnerabilities can be exploited remotely to execute arbitrary code;
9. Multiple untrusted pointer dereference vulnerabilities can be exploited remotely to execute arbitrary code;
10. Multiple use after free vulnerabilities can be exploited remotely to execute arbitrary code.

Original advisories

• APSB19-07

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Adobe-Acrobat-Reader-DC-Continuous
• Adobe-Acrobat-Reader-DC-Classic
• Adobe-Acrobat-DC-Continuous
• Adobe-Acrobat-DC-Classic
• Adobe-Acrobat-Reader-2017
• Adobe-Acrobat-2017

CVE list

• CVE-2019-7020
  critical
• CVE-2019-7085
  critical
• CVE-2019-7089
  critical
• CVE-2019-7080
  critical
• CVE-2019-7030
  warning
• CVE-2019-7021
  warning
• CVE-2019-7022
  warning
• CVE-2019-7023
  warning
• CVE-2019-7024
  warning
• CVE-2019-7028
  warning
• CVE-2019-7032
  warning
• CVE-2019-7033
  warning
• CVE-2019-7034
  warning
• CVE-2019-7035
  warning
• CVE-2019-7036
  warning
• CVE-2019-7038
  warning
• CVE-2019-7045
  warning
• CVE-2019-7047
  warning
• CVE-2019-7049
  warning
• CVE-2019-7053
  warning
• CVE-2019-7055
  warning
• CVE-2019-7056
  warning
• CVE-2019-7057
  warning
• CVE-2019-7058
  warning
• CVE-2019-7059
  warning
• CVE-2019-7063
  warning
• CVE-2019-7064
  warning
• CVE-2019-7065
  warning
• CVE-2019-7067
  warning
• CVE-2019-7071
  warning
• CVE-2019-7073
  warning
• CVE-2019-7074
  warning
• CVE-2019-7081
  warning
• CVE-2018-19725
  critical
• CVE-2019-7041
  high
• CVE-2019-7019
  critical
• CVE-2019-7027
  critical
• CVE-2019-7037
  critical
• CVE-2019-7039
  critical
• CVE-2019-7052
  critical
• CVE-2019-7060
  critical
• CVE-2019-7079
  critical
• CVE-2019-7069
  critical
• CVE-2019-7086
  critical
• CVE-2019-7087
  critical
• CVE-2019-7042
  critical
• CVE-2019-7046
  critical
• CVE-2019-7051
  critical
• CVE-2019-7054
  critical
• CVE-2019-7066
  critical
• CVE-2019-7076
  critical
• CVE-2019-7018
  critical
• CVE-2019-7025
  critical
• CVE-2019-7026
  critical
• CVE-2019-7029
  critical
• CVE-2019-7031
  critical
• CVE-2019-7040
  critical
• CVE-2019-7043
  critical
• CVE-2019-7044
  critical
• CVE-2019-7048
  critical
• CVE-2019-7050
  critical
• CVE-2019-7062
  critical
• CVE-2019-7068
  critical
• CVE-2019-7070
  critical
• CVE-2019-7072
  critical
• CVE-2019-7075
  high
• CVE-2019-7077
  critical
• CVE-2019-7078
  critical
• CVE-2019-7082
  critical
• CVE-2019-7083
  critical
• CVE-2019-7084
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com