KLA11393
Multiple vulnerabilities in Adobe Acrobat and Acrobat Reader
Обновлено: 05/03/2019
Дата обнаружения
03/01/2019
Уровень угрозы
Critical
Описание

Multiple serious vulnerabilities were found in Adobe Acrobat and Acrobat Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges.

Below is a complete list of vulnerabilities:

  1. An use-after-free vulnerability can be exploited remotely to execute arbitrary code;
  2. A security bypass vulnerability can be exploited remotely to gain privileges.
Пораженные продукты

Adobe Acrobat DC Continuous earlier than 2019.010.20069
Adobe Acrobat Reader DC Continuous earlier than 2019.010.20069
Adobe Acrobat 2017 (Classic 2017 Track) earlier than 2017.011.30113
Adobe Acrobat Reader 2017 (Classic 2017 Track) earlier than 2017.011.30113
Adobe Acrobat DC (Classic 2015 Track) earlier than 2015.006.30464
Adobe Acrobat Reader DC (Classic 2015 Track) earlier than 2015.006.30464

Решение

Update to the latest version
Download Adobe Acrobat Reader DC

Первичный источник обнаружения
APSB19-02
Оказываемое влияние
?
ACE 
[?]

PE 
[?]
Связанные продукты
Adobe Acrobat Reader DC Continuous
Adobe Acrobat Reader DC Classic
Adobe Acrobat DC Continuous
Adobe Acrobat DC Classic
Adobe Acrobat Reader 2017
Adobe Acrobat 2017
CVE-IDS

CVE-2018-16018
CVE-2018-16011