Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

Description

Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. Type confusion vulnerability can be exploited to execute arbitrary code;
2. Heap overflow vulnerabilities can be exploited to execute arbitrary code;
3. Out-of-bound read vulnerability can be exploited to obtain sensitive information;
4. Out-of-bounds write vulnerability can be exploited to execute arbitrary code;
5. Use-after-free vulnerability can be exploited to execute arbitrary code;
6. Out-of-bound read vulnerability can be exploited to obtain sensitive information;
7. Untrusted pointer dereference vulnerabilities can be exploited to execute arbitrary code;
8. Vulnerability related to Incomplete Implementation of Security Mechanism can be exploited to obtain sensitive information;
9. Race Condition vulnerabilities can be exploited to execute arbitrary code;
10. Out-of-bounds write vulnerability can be exploited to execute arbitrary code;
11. Cross-site Scripting vulnerability can be exploited to obtain sensitive information;
12. Use-after-free vulnerability can be exploited to execute arbitrary code;
13. Buffer Overrun vulnerabilities can be exploited to execute arbitrary code.

Original advisories

• APSB19-49

Exploitation

Public exploits exist for this vulnerability.

CVE list

• CVE-2019-8169
  critical
• CVE-2019-8183
  critical
• CVE-2019-8218
  critical
• CVE-2019-8186
  critical
• CVE-2019-8216
  critical
• CVE-2019-8203
  critical
• CVE-2019-8194
  critical
• CVE-2019-8173
  warning
• CVE-2019-8190
  warning
• CVE-2019-8220
  critical
• CVE-2019-8207
  critical
• CVE-2019-8064
  warning
• CVE-2019-8198
  critical
• CVE-2019-8181
  critical
• CVE-2019-8182
  critical
• CVE-2019-8219
  critical
• CVE-2019-8209
  critical
• CVE-2019-8205
  critical
• CVE-2019-8206
  critical
• CVE-2019-8222
  critical
• CVE-2019-8202
  critical
• CVE-2019-8226
  critical
• CVE-2019-8193
  critical
• CVE-2019-8195
  critical
• CVE-2019-8168
  critical
• CVE-2019-8200
  critical
• CVE-2019-8167
  critical
• CVE-2019-8197
  critical
• CVE-2019-8170
  critical
• CVE-2019-8217
  critical
• CVE-2019-8162
  critical
• CVE-2019-8199
  critical
• CVE-2019-8196
  critical
• CVE-2019-8174
  critical
• CVE-2019-8178
  critical
• CVE-2019-8225
  critical
• CVE-2019-8160
  high
• CVE-2019-8224
  critical
• CVE-2019-8177
  critical
• CVE-2019-8204
  critical
• CVE-2019-8210
  critical
• CVE-2019-8164
  critical
• CVE-2019-8185
  critical
• CVE-2019-8212
  critical
• CVE-2019-8201
  critical
• CVE-2019-8215
  critical
• CVE-2019-8165
  critical
• CVE-2019-8187
  warning
• CVE-2019-8188
  warning
• CVE-2019-8208
  critical
• CVE-2019-8223
  critical
• CVE-2019-8184
  critical
• CVE-2019-8191
  critical
• CVE-2019-8172
  warning
• CVE-2019-8175
  critical
• CVE-2019-8180
  critical
• CVE-2019-8179
  critical
• CVE-2019-8163
  warning
• CVE-2019-8171
  critical
• CVE-2019-8161
  critical
• CVE-2019-8221
  critical
• CVE-2019-8189
  warning
• CVE-2019-8176
  critical
• CVE-2019-8214
  critical
• CVE-2019-8192
  critical
• CVE-2019-8213
  critical
• CVE-2019-8211
  critical
• CVE-2019-8166
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com