KLA11357 Information disclosure Vulnerability in Adobe Acrobat and Reader

Vulnerability related to NTLM SSO hash theft was found in Adobe Acrobat and Reader. Malicious users can exploit this vulnerability to obtain sensitive information.

Original advisories

APSB18-40

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

Adobe-Acrobat

Adobe-Acrobat-Reader-DC-Continuous

Adobe-Acrobat-Reader-DC-Classic

Adobe-Acrobat-DC-Continuous

Adobe-Acrobat-DC-Classic

Adobe-Acrobat-Reader-2017

Adobe-Acrobat-2017

Adobe-Acrobat-Reader

CVE list

CVE-2018-15979 warning

Solution

Update to the latest versionDownload Adobe Acrobat Reader DC

Download Adobe Acrobat DC

Impacts

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

• Adobe Acrobat DC (Continuous) 2019.008.20080 and earlier versionsAdobe Acrobat Reader DC (Continuous) 2019.008.20080 and earlier versionsAdobe Acrobat 2017 (Classic 2017) 2017.011.30105 and earlier versionsAdobe Acrobat Reader 2017 (Classic 2017) 2017.011.30105 and earlier versionsAdobe Acrobat DC (Classic 2015) 2015.006.30456 and earlier versionsAdobe Acrobat Reader DC (Classic 2015) 2015.006.30456 and earlier versions