MEDIUM
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability
Published Oct 12, 2018
5.5
MEDIUMCVSS 3.0
EPSS 5.46%
Description
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Affected products
-
- Version 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier versionsStatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Adobe | Adobe Acrobat and Reader | n/a |
|
AND
OR
- ≥ 15.006.30060 · ≤ 15.006.30452
- ≥ 15.008.20082 · ≤ 18.011.20063
- ≥ 17.011.30059 · ≤ 17.011.30102
- ≥ 15.006.30060 · ≤ 15.006.30452
- ≥ 15.008.20082 · ≤ 18.011.20063
- ≥ 17.011.30059 · ≤ 17.011.30102
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (3)
- http://www.securityfocus.com/bid/105439 vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1041809 vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
- https://helpx.adobe.com/security/products/acrobat/apsb18-30.html x_refsource_CONFIRMVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| http://www.securityfocus.com/bid/105439 | vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry | |
| http://www.securitytracker.com/id/1041809 | vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry | |
| https://helpx.adobe.com/security/products/acrobat/apsb18-30.html | x_refsource_CONFIRMVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner adobe
Published Oct 12, 2018
Updated Aug 5, 2024
Reserved Aug 28, 2018
Link CVE-2018-15943
CISA Vulnrichment
Updated n/a