KLA11252 Multiple vulnerabilities in Adobe Acrobat and Acrobat Reader

🗓️ 14 May 2018 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 376 Views

Multiple vulnerabilities in Adobe Acrobat and Acrobat Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information and bypass security restrictions. Includes heap buffer overflow, use-after-free, out-of-bounds write, security bypass, type confusion and untrusted pointer dereference vulnerabilities

Reporter	Title	Published	Views	Family All 410
Tenable Nessus	Adobe Acrobat < 2015.006.30418 / 2017.011.30080 / 2018.011.20040 Multiple Vulnerabilities (APSB18-09)	17 May 201800:00	–	nessus
Tenable Nessus	Adobe Reader < 2015.006.30418 / 2017.011.30080 / 2018.011.20040 Multiple Vulnerabilities (APSB18-09)	17 May 201800:00	–	nessus
Tenable Nessus	Adobe Acrobat < 2015.006.30418 / 2017.011.30080 / 2018.011.20040 Multiple Vulnerabilities (APSB18-09) (macOS)	17 May 201800:00	–	nessus
Tenable Nessus	Adobe Reader < 2015.006.30418 / 2017.011.30080 / 2018.011.20040 Multiple Vulnerabilities (APSB18-09) (macOS)	17 May 201800:00	–	nessus
Tenable Nessus	Adobe Acrobat < 2015.006.30418 / 2017.011.30080 / 2018.011.20040 Multiple Vulnerabilities (APSB18-09) (macOS)	12 Sep 202400:00	–	nessus
Tenable Nessus	Adobe Reader < 2015.006.30418 / 2017.011.30080 / 2018.011.20040 Multiple Vulnerabilities (APSB18-09) (macOS)	12 Sep 202400:00	–	nessus
attackerkb	CVE-2018-4990	9 Jul 201800:00	–	attackerkb
BDU FSTEC	The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015, related to memory reclamation, allow attackers to execute arbitrary code.	11 Nov 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader Document Cloud 2017, and Adobe Acrobat Reader Document Cloud 2015 are related to memory usage after it is freed. This allows attackers to execute arbitrary code in the context of the current user.	30 Apr 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of PDF viewing and editing programs such as Acrobat DC, Acrobat Reader DC, Acrobat 2017, and Acrobat Reader 2017 lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.	14 May 202500:00	–	bdu_fstec

Source	Link
helpx	www.helpx.adobe.com/security/products/acrobat/apsb18-09.html
threats	www.threats.kaspersky.com/en/class/Exploit/
threats	www.threats.kaspersky.com/en/product/Adobe-Acrobat/
threats	www.threats.kaspersky.com/en/product/Adobe-Acrobat-Reader-DC-Continuous/
threats	www.threats.kaspersky.com/en/product/Adobe-Acrobat-Reader-DC-Classic/
threats	www.threats.kaspersky.com/en/product/Adobe-Acrobat-DC-Continuous/
threats	www.threats.kaspersky.com/en/product/Adobe-Acrobat-DC-Classic/
threats	www.threats.kaspersky.com/en/product/Adobe-Acrobat-Reader-2017/
threats	www.threats.kaspersky.com/en/product/Adobe-Acrobat-2017/
threats	www.threats.kaspersky.com/en/product/Adobe-Acrobat-Reader/

09 Sep 2026 00:00Current

9.8Critical risk

Vulners AI Score9.8

CVSS 39.8

CVSS 210

CVSS 3.18.8

EPSS0.36228

SSVC