Lucene search

[email protected]CVE-2018-4917

HistoryMay 19, 2018 - 5:29 p.m.

CVE-2018-4917

2018-05-1917:29:00

CWE-787

[email protected]

web.nvd.nist.gov

cve-2018-4917

adobe acrobat

reader

heap overflow

arbitrary code execution

nvd

vulnerability

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

88.0%

JSON

Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, 2015.006.30394 and earlier have an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Affected configurations

Vulners

NVD

Node

n\/aadobe_acrobat_and_reader_2018.009.20050_and_earlier_versions_\,_2017.011.30070_and_earlier_versions\,_2015.006.30394_and_earlier_versionsRange≤2018.009.20050

n\/aadobe_acrobat_and_reader_2018.009.20050_and_earlier_versions_\,_2017.011.30070_and_earlier_versions\,_2015.006.30394_and_earlier_versionsRange≤2017.011.30070

n\/aadobe_acrobat_and_reader_2018.009.20050_and_earlier_versions_\,_2017.011.30070_and_earlier_versions\,_2015.006.30394_and_earlier_versionsRange≤2015.006.30394

CPENameOperatorVersion
adobe:acrobat_2017adobe acrobat 2017lt17.011.30078
adobe:acrobat_dcadobe acrobat dclt15.006.30413
adobe:acrobat_dcadobe acrobat dclt18.011.20035
adobe:acrobat_reader_2017adobe acrobat reader 2017lt17.011.30078
adobe:acrobat_reader_dcadobe acrobat reader dclt15.006.30413
adobe:acrobat_reader_dcadobe acrobat reader dclt18.011.20035

CPE	Name	Operator	Version
adobe:acrobat_2017	adobe acrobat 2017	lt	17.011.30078
adobe:acrobat_dc	adobe acrobat dc	lt	15.006.30413
adobe:acrobat_dc	adobe acrobat dc	lt	18.011.20035
adobe:acrobat_reader_2017	adobe acrobat reader 2017	lt	17.011.30078
adobe:acrobat_reader_dc	adobe acrobat reader dc	lt	15.006.30413
adobe:acrobat_reader_dc	adobe acrobat reader dc	lt	18.011.20035

CNA Affected

[
  {
    "product": "Adobe Acrobat and Reader 2018.009.20050 and earlier versions , 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Adobe Acrobat and Reader 2018.009.20050 and earlier versions , 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions"
      }
    ]
  }
]