Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA11252
HistoryMay 14, 2018 - 12:00 a.m.

KLA11252 Multiple vulnerabilities in Adobe Acrobat and Acrobat Reader

2018-05-1400:00:00
Kaspersky Lab
threats.kaspersky.com
336

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.969 High

EPSS

Percentile

99.7%

JSON

Detect date:

05/14/2018

Severity:

Critical

Description:

Multiple serious vulnerabilities have been found in Adobe Acrobat and Acrobat Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information and bypass security restrictions. Below is a complete list of vulnerabilities:

Affected products:

Adobe Acrobat DC earlier than 2018.011.20040
Adobe Acrobat Reader DC earlier than 2018.011.20040
Adobe Acrobat 2017 earlier than 2017.011.30080
Adobe Acrobat Reader 2017 earlier than 2017.011.30080
Adobe Acrobat DC (Classic 2015) earlier than 2015.006.30418
Adobe Acrobat Reader DC (Classic 2015) earlier than 2015.006.30418

Solution:

Upgrade to latest version
Download Adobe Acrobat DC
Download Adobe Acrobat Reader DC

Original advisories:

APSB18-09

Impacts:

ACE

Related products:

Adobe Acrobat

CVE-IDS:

CVE-2018-49906.8High
CVE-2018-49826.8High
CVE-2018-49526.8High
CVE-2018-49546.8High
CVE-2018-49716.8High
CVE-2018-49746.8High
CVE-2018-49806.8High
CVE-2018-49794.3Warning
CVE-2018-49495.0Warning
CVE-2018-49514.3Warning
CVE-2018-49555.0Warning
CVE-2018-49565.0Warning
CVE-2018-49575.0Warning
CVE-2018-49605.0Warning
CVE-2018-49625.0Warning
CVE-2018-49635.0Warning
CVE-2018-49645.0Warning
CVE-2018-49675.0Warning
CVE-2018-49695.0Warning
CVE-2018-49705.0Warning
CVE-2018-49724.3Warning
CVE-2018-49735.0Warning
CVE-2018-49755.0Warning
CVE-2018-49765.0Warning
CVE-2018-49815.0Warning
CVE-2018-49865.0Warning
CVE-2018-49855.0Warning
CVE-2018-49536.8High
CVE-2018-49655.0Warning
CVE-2018-49935.0Warning
CVE-2018-49957.5Critical

Exploitation:

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

References

Related

openvas 8
nessus 4
trendmicroblog 1
adobe 1
cve 32
checkpoint_advisories 30
prion 32
zdi 30
cisa_kev 1
attackerkb 1
threatpost 1
seebug 1
thn 1
mssecure 1
myhack58 1
malwarebytes 1
securelist 1
openvas
openvas
Adobe Acrobat 2017 Security Updates (APSB18-09) - Mac OS X
2018-05-15 00:00:00
Adobe Acrobat DC (Classic Track) Security Updates (APSB18-09) - Mac OS X
2018-05-15 00:00:00
Adobe Reader 2017 Security Updates (APSB18-09) - Mac OS X
2018-05-15 00:00:00
nessus
nessus
Adobe Acrobat < 2015.006.30418 / 2017.011.30080 / 2018.011.20040 Multiple Vulnerabilities (APSB18-09)
2018-05-17 00:00:00
Adobe Acrobat < 2015.006.30418 / 2017.011.30080 / 2018.011.20040 Multiple Vulnerabilities (APSB18-09) (macOS)
2018-05-17 00:00:00
Adobe Reader <= 2015.006.30417 / 2017.011.30079 / 2018.011.20038 Multiple Vulnerabilities (APSB18-09)
2018-05-17 00:00:00
trendmicroblog
trendmicroblog
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of May 14, 2018
2018-05-18 14:52:12
adobe
adobe
APSB18-09 Security Updates Available for Adobe Acrobat and Reader
2018-05-14 00:00:00
cve
cve
CVE-2018-4972
2018-07-09 19:29:00
CVE-2018-4960
2018-07-09 19:29:00
CVE-2018-4982
2018-07-09 19:29:00
checkpoint_advisories
checkpoint_advisories
Adobe Acrobat and Reader Out-of-bounds read (APSB18-09: CVE-2018-4970)
2018-05-08 00:00:00
Adobe Acrobat and Reader Out-of-bounds read (APSB18-09: CVE-2018-4960)
2018-05-08 00:00:00
Adobe Acrobat and Reader Out-of-bounds read (APSB18-09: CVE-2018-4973)
2018-05-08 00:00:00
prion
prion
Heap overflow
2018-07-09 19:29:00
Out-of-bounds
2018-07-09 19:29:00
Out-of-bounds
2018-07-09 19:29:00
zdi
zdi
Adobe Acrobat Pro DC ImageConversion XPS Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
2018-05-15 00:00:00
Adobe Acrobat Pro DC ImageConversion JPEG Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
2018-05-15 00:00:00
Adobe Acrobat Pro DC ImageConversion EMF EMR_STRETCHDIBITS Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
2018-05-15 00:00:00
cisa_kev
cisa_kev
Adobe Acrobat and Reader Double Free Vulnerability
2022-06-08 00:00:00
attackerkb
attackerkb
CVE-2018-4990
2018-07-09 00:00:00
threatpost
threatpost
Temporary Patch Released For Adobe Reader Zero-Day
2019-02-11 19:20:08
seebug
seebug
Microsoft Windows Kernel 'Win32k.sys' Local Privilege Escalation Vulnerability(CVE-2018-8120)
2018-05-21 00:00:00
thn
thn
Two Zero-Day Exploits Found After Someone Uploaded 'Unarmed' PoC to VirusTotal
2018-07-02 18:28:00
mssecure
mssecure
Taking apart a double zero-day sample discovered in joint hunt with ESET
2018-07-02 15:00:00
myhack58
myhack58
CVE-2018-4990 Adobe Reader code execution exploit analysis-exploit warning-the black bar safety net
2018-06-01 00:00:00
malwarebytes
malwarebytes
Adobe Reader zero-day discovered alongside Windows vulnerability
2018-05-15 18:44:14
securelist
securelist
IT threat evolution Q2 2018. Statistics
2018-08-06 10:00:04

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.969 High

EPSS

Percentile

99.7%

JSON
Related for KLA11252
openvas8nessus4trendmicroblog1adobe1cve32checkpoint_advisories30prion32zdi30cisa_kev1attackerkb1threatpost1seebug1thn1mssecure1myhack581malwarebytes1securelist1