← Back

CVE-2018-12799

nvd nist
Published: Aug 29, 2018Modified: Nov 21, 2024

JSON object

Loading...
8.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

Adobe Acrobat and Reader versions 2018.011.20055 and earlier, 2017.011.30096 and earlier, and 2015.006.30434 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution.

Affected (6)

Adobe
2 products
Acrobat Dc
Acrobat Reader Dc
Configuration A
6 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Adobe
Acrobat Dc
From 15.006.30060 to 15.006.30434
Acrobat Dc
From 17.011.30059 to 17.011.30096
Acrobat Dc
From 15.008.20082 to 18.011.20055
Adobe
Acrobat Reader Dc
From 15.006.30060 to 15.006.30434
Acrobat Reader Dc
From 17.011.30059 to 17.011.30096
Acrobat Reader Dc
From 15.008.20082 to 18.011.20055
Running on/withPlatform Versions
Apple
Mac Os X
All versions
Microsoft
Windows
All versions

Related CWEs

CWE-476
NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.

References (6)

Source: psirt@adobe.com
Third Party AdvisoryVDB Entry
Source: psirt@adobe.com
Third Party AdvisoryVDB Entry
Source: psirt@adobe.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.