The vulnerability of the ImageConversion.api file in programs for viewing and editing PDF files in Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader Document Cloud 2017 arises from reading data beyond the buffer in memory. This allows attackers to disclose protected information.

🗓️ 28 Nov 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 11 Views

The ImageConversion.api in Adobe products reads beyond the memory buffer, risking disclosure of protected data.

Reporter	Title	Published	Views	Family All 26
Tenable Nessus	Adobe Acrobat < 2015.006.30456 / 2017.011.30105 / 2019.008.20071 Multiple Vulnerabilities (APSB18-30)	2 Oct 201800:00	–	nessus
Tenable Nessus	Adobe Reader < 2015.006.30456 / 2017.011.30105 / 2019.008.20071 Multiple Vulnerabilities (APSB18-30)	2 Oct 201800:00	–	nessus
Tenable Nessus	Adobe Acrobat <= 15.006.30452 / 17.011.30102 / 18.011.20063 Multiple Vulnerabilities (APSB18-30) (macOS)	2 Oct 201800:00	–	nessus
Tenable Nessus	Adobe Reader <= 15.006.30452 / 17.011.30102 / 18.011.20063 Multiple Vulnerabilities (APSB18-30) (macOS)	2 Oct 201800:00	–	nessus
Tenable Nessus	Adobe Acrobat < 2015.006.30456 / 2017.011.30105 / 2019.008.20071 Multiple Vulnerabilities (APSB18-30) (macOS)	12 Sep 202400:00	–	nessus
Tenable Nessus	Adobe Reader < 2015.006.30456 / 2017.011.30105 / 2019.008.20071 Multiple Vulnerabilities (APSB18-30) (macOS)	12 Sep 202400:00	–	nessus
CNVD	Adobe Acrobat and Reader Out-of-Bounds Read Vulnerability (CNVD-2019-01920)	12 Oct 201800:00	–	cnvd
Check Point Advisories	Adobe Acrobat and Reader Out-of-bounds read (APSB18-30: CVE-2018-15927)	2 Oct 201800:00	–	checkpoint_advisories
CVE	CVE-2018-15927	12 Oct 201818:00	–	cve
Cvelist	CVE-2018-15927	12 Oct 201818:00	–	cvelist

Source	Link
helpx	www.helpx.adobe.com/security/products/acrobat/apsb18-30.html
bugtraq	www.bugtraq.securityfocus.com/archive
securitytracker	www.securitytracker.com/id/1041809
research	www.research.checkpoint.com/2018/50-adobe-cves-in-50-days/
cpr-zero	www.cpr-zero.checkpoint.com/vulns/cprid-2082/
web	www.web.nvd.nist.gov/view/vuln/detail

28 Nov 2022 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 24.9

CVSS 35.5

EPSS0.16374

image conversion api memory buffer overread protected data disclosure adobe acrobat cloud pdf viewer editor