Lucene search

[email protected]CVE-2019-8040

HistoryAug 20, 2019 - 8:15 p.m.

CVE-2019-8040

2019-08-2020:15:17

CWE-125

[email protected]

web.nvd.nist.gov

adobe

acrobat

reader

out-of-bounds read

vulnerability

information disclosure

nvd

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

7.2 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.552 Medium

EPSS

Percentile

97.7%

JSON

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .

Affected configurations

Vulners

NVD

Node

adobeacrobat_readerRange≤2019.012.20035

adobeacrobat_readerRange≤2017.011.30142

adobeacrobat_readerRange≤2017.011.30143

adobeacrobat_readerRange≤2015.006.30497

adobeacrobat_readerRange≤2015.006.30498

VendorProductVersionCPE
adobeacrobat_reader*cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*
adobeacrobat_reader*cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*
adobeacrobat_reader*cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*
adobeacrobat_reader*cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*
adobeacrobat_reader*cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
adobe	acrobat_reader	*	cpe:2.3:a:adobe:acrobat_reader::::::::
adobe	acrobat_reader	*	cpe:2.3:a:adobe:acrobat_reader::::::::
adobe	acrobat_reader	*	cpe:2.3:a:adobe:acrobat_reader::::::::
adobe	acrobat_reader	*	cpe:2.3:a:adobe:acrobat_reader::::::::
adobe	acrobat_reader	*	cpe:2.3:a:adobe:acrobat_reader::::::::

CNA Affected

[
  {
    "product": "Adobe Acrobat and Reader",
    "vendor": "Adobe",
    "versions": [
      {
        "status": "affected",
        "version": "2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier versions"
      }
    ]
  }
]