Lucene search

[email protected]CVE-2019-7075

HistoryMay 24, 2019 - 7:29 p.m.

CVE-2019-7075

2019-05-2419:29:02

CWE-416

[email protected]

web.nvd.nist.gov

adobe

acrobat

reader

cve-2019-7075

vulnerability

use after free

arbitrary code execution

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:N/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

8.2 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

85.9%

JSON

Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Affected configurations

Vulners

NVD

Node

adobeacrobat_readerRange≤2019.010.20069

adobeacrobat_readerRange≤2017.011.30113

adobeacrobat_readerRange≤2015.006.30464

VendorProductVersionCPE
adobeacrobat_reader*cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*
adobeacrobat_reader*cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*
adobeacrobat_reader*cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
adobe	acrobat_reader	*	cpe:2.3:a:adobe:acrobat_reader::::::::
adobe	acrobat_reader	*	cpe:2.3:a:adobe:acrobat_reader::::::::
adobe	acrobat_reader	*	cpe:2.3:a:adobe:acrobat_reader::::::::

CNA Affected

[
  {
    "product": "Adobe Acrobat and Reader",
    "vendor": "Adobe",
    "versions": [
      {
        "status": "affected",
        "version": "2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier versions"
      }
    ]
  }
]