HIGH
CoolType.dll crash - Tianfu Cup
Published Sep 11, 2023
7.8
HIGHCVSS 3.1
EPSS 0.48%
Description
Adobe Acrobat Reader versions 2019.021.20056 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected products
-
- Version 0StatusaffectedConstraints<=2019.021.20056
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Adobe | Acrobat Reader | affected |
|
Configuration 1
AND
OR
- ≥ 15.006.30060 · ≤ 15.006.30505
- ≥ 15.008.20082 · ≤ 19.021.20056
- ≥ 17.011.30059 · ≤ 17.011.30152
- ≥ 15.006.30060 · ≤ 15.006.30505
- ≥ 15.008.20082 · ≤ 19.021.20056
- ≥ 17.011.30059 · ≤ 17.011.30152
Configuration 2
AND
- ≥ 17.011.30059 · ≤ 17.011.30155
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (2)
References (2)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7184 Advisory
- https://helpx.adobe.com/security/products/acrobat/apsb19-55.html vendor-advisoryVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7184 | Advisory | |
| https://helpx.adobe.com/security/products/acrobat/apsb19-55.html | vendor-advisoryVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner adobe
Published Sep 11, 2023
Updated Aug 5, 2024
Reserved Sep 19, 2019
Link CVE-2019-16470
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2019-7184 Assigner adobe
Published Sep 11, 2023
Updated Aug 5, 2024
Exploited since n/a
Link EUVD-2019-7184