PDF Writing Buffer Overflow Code Execution

🗓️ 17 Sep 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec🔗 bdu.fstec.ru👁 15 Views

Adobe PDF products have memory buffer overflow flaws; crafted PDFs can execute code as the current user.

Reporter	Title	Published	Views	Family All 32
Tenable Nessus	Adobe Acrobat < 2015.006.30475 / 2017.011.30120 / 2019.010.20091 Multiple Vulnerabilities (APSB19-07)	15 Feb 201900:00	–	nessus
Tenable Nessus	Adobe Reader < 2015.006.30475 / 2017.011.30120 / 2019.010.20091 Multiple Vulnerabilities (APSB19-07)	15 Feb 201900:00	–	nessus
Tenable Nessus	Adobe Acrobat < 2019.010.20091 / 2017.011.30120 / 2015.006.30475 Multiple Vulnerabilities (APSB19-07) (macOS)	15 Feb 201900:00	–	nessus
Tenable Nessus	Adobe Reader < 2019.010.20091 / 2017.011.30120 / 2015.006.30475 Multiple Vulnerabilities (APSB19-07) (macOS)	15 Feb 201900:00	–	nessus
Tenable Nessus	Adobe Acrobat < 2015.006.30475 / 2017.011.30120 / 2019.010.20091 Multiple Vulnerabilities (APSB19-07) (macOS)	12 Sep 202400:00	–	nessus
Tenable Nessus	Adobe Reader < 2015.006.30475 / 2017.011.30120 / 2019.010.20091 Multiple Vulnerabilities (APSB19-07) (macOS)	12 Sep 202400:00	–	nessus
Circl	CVE-2019-7079	24 May 201919:48	–	circl
CNVD	Adobe Acrobat/Reader Out-of-Bounds Write Vulnerability (CNVD-2019-22477)	13 Feb 201900:00	–	cnvd
Check Point Advisories	Adobe Acrobat and Reader Out-of-bounds write (APSB19-07: CVE-2019-7079)	12 Feb 201900:00	–	checkpoint_advisories
CVE	CVE-2019-7079	24 May 201919:00	–	cve

Source	Link
helpx	www.helpx.adobe.com/security/products/acrobat/apsb19-07.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-7079
web	www.web.nvd.nist.gov/view/vuln/detail

17 Sep 2020 00:00Current

8.1High risk

Vulners AI Score8.1

CVSS 38.8

CVSS 29.3

EPSS0.03539

Acrobat Document Cloud Acrobat Reader Cloud Acrobat 2017 Acrobat Reader 2017 Acrobat 2015 Memory buffer overflow Arbitrary code execution