Lucene search

K
cve[email protected]CVE-2018-12840
HistorySep 25, 2018 - 1:29 p.m.

CVE-2018-12840

2018-09-2513:29:00
CWE-125
web.nvd.nist.gov
28
cve-2018-12840
adobe
acrobat
reader
out-of-bounds read
vulnerability
information disclosure
nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.8 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.009 Low

EPSS

Percentile

82.3%

Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and 2015.006.30448 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

Affected configurations

NVD
Node
adobeacrobat_dcRange15.006.3006015.006.30448classic
OR
adobeacrobat_dcRange15.008.2008218.011.20058continuous
OR
adobeacrobat_dcRange17.011.3005917.011.30099classic
OR
adobeacrobat_reader_dcRange15.006.3006015.006.30448classic
OR
adobeacrobat_reader_dcRange15.008.2008218.011.20058continuous
OR
adobeacrobat_reader_dcRange17.011.3005917.011.30099classic
AND
applemac_os_xMatch-
OR
microsoftwindowsMatch-

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.8 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.009 Low

EPSS

Percentile

82.3%