MEDIUM
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability
Published Oct 12, 2018
5.5
MEDIUMCVSS 3.0
EPSS 19.73%
Description
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Affected products
-
- Version 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier versionsStatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Adobe | Adobe Acrobat and Reader | n/a |
|
AND
OR
- ≥ 15.006.30060 · ≤ 15.006.30452
- ≥ 15.008.20082 · ≤ 18.011.20063
- ≥ 17.011.30059 · ≤ 17.011.30102
- ≥ 15.006.30060 · ≤ 15.006.30452
- ≥ 15.008.20082 · ≤ 18.011.20063
- ≥ 17.011.30059 · ≤ 17.011.30102
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (4)
- http://www.securityfocus.com/bid/105439 vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1041809 vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
- https://helpx.adobe.com/security/products/acrobat/apsb18-30.html x_refsource_CONFIRMPatchVendor Advisory
- https://research.checkpoint.com/2018/50-adobe-cves-in-50-days/ x_refsource_MISC
| Link | Providers | Tags |
|---|---|---|
| http://www.securityfocus.com/bid/105439 | vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry | |
| http://www.securitytracker.com/id/1041809 | vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry | |
| https://helpx.adobe.com/security/products/acrobat/apsb18-30.html | x_refsource_CONFIRMPatchVendor Advisory | |
| https://research.checkpoint.com/2018/50-adobe-cves-in-50-days/ | x_refsource_MISC |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner adobe
Published Oct 12, 2018
Updated Aug 5, 2024
Reserved Jun 25, 2018
Link CVE-2018-12870
CISA Vulnrichment
Updated n/a