Lucene search

[email protected]CVE-2018-4889

HistoryFeb 27, 2018 - 5:29 a.m.

CVE-2018-4889

2018-02-2705:29:00

CWE-125

[email protected]

web.nvd.nist.gov

cve-2018-4889

adobe acrobat reader

vulnerability

xps

image conversion

data exposure

nvd

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

7.5 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.021 Low

EPSS

Percentile

89.1%

JSON

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of the XPS image conversion. A successful attack can lead to sensitive data exposure.

Affected configurations

Vulners

NVD

Node

n\/aadobe_acrobat_reader_2018.009.20050_and_earlier_versions\,_2017.011.30070_and_earlier_versions\,_2015.006.30394_and_earlier_versionsRange≤2018.009.20050

n\/aadobe_acrobat_reader_2018.009.20050_and_earlier_versions\,_2017.011.30070_and_earlier_versions\,_2015.006.30394_and_earlier_versionsRange≤2017.011.30070

n\/aadobe_acrobat_reader_2018.009.20050_and_earlier_versions\,_2017.011.30070_and_earlier_versions\,_2015.006.30394_and_earlier_versionsRange≤2015.006.30394

CPENameOperatorVersion
adobe:acrobatadobe acrobatle17.011.30070
adobe:acrobat_dcadobe acrobat dcle18.009.20050
adobe:acrobat_dcadobe acrobat dcle15.006.30394
adobe:acrobat_readeradobe acrobat readerle17.011.30070
adobe:acrobat_reader_dcadobe acrobat reader dcle18.009.20050
adobe:acrobat_reader_dcadobe acrobat reader dcle15.006.30394

CPE	Name	Operator	Version
adobe:acrobat	adobe acrobat	le	17.011.30070
adobe:acrobat_dc	adobe acrobat dc	le	18.009.20050
adobe:acrobat_dc	adobe acrobat dc	le	15.006.30394
adobe:acrobat_reader	adobe acrobat reader	le	17.011.30070
adobe:acrobat_reader_dc	adobe acrobat reader dc	le	18.009.20050
adobe:acrobat_reader_dc	adobe acrobat reader dc	le	15.006.30394

CNA Affected

[
  {
    "product": "Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions"
      }
    ]
  }
]