Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA11390
HistoryDec 11, 2018 - 12:00 a.m.

KLA11390 Multiple vulnerabilities in Adobe Acrobat and Reader

2018-12-1100:00:00
Kaspersky Lab
threats.kaspersky.com
194

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.3 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.485 Medium

EPSS

Percentile

97.4%

JSON

Detect date:

12/11/2018

Severity:

Critical

Description:

Multiple serious vulnerabilities were found in Adobe Acrobat and Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges and obtain sensitive information.

Affected products:

Adobe Acrobat DC Continuous earlier than 2019.010.20064
Adobe Acrobat Reader DC Continuous earlier than 2019.010.20064
Adobe Acrobat 2017 (Classic Track) earlier than 2017.011.30110
Adobe Acrobat Reader 2017 (Classic Track) earlier than 2017.011.30110
Adobe Acrobat DC 2015(Classic Track) earlier than 2015.006.30461
Adobe Acrobat Reader DC 2015 (Classic Track) earlier than 2015.006.30461

Solution:

Update to the latest version
Download Adobe Acrobat Reader DC

Original advisories:

Security Bulletin for Adobe Acrobat and Reader | APSB18-41

Impacts:

ACE

Related products:

Adobe Acrobat Reader DC Continuous

CVE-IDS:

CVE-2018-159989.3Critical
CVE-2018-159879.3Critical
CVE-2018-160049.3Critical
CVE-2018-197209.3Critical
CVE-2018-160459.3Critical
CVE-2018-160449.3Critical
CVE-2018-160189.3Critical
CVE-2018-197139.3Critical
CVE-2018-160469.3Critical
CVE-2018-160296.8High
CVE-2018-160276.8High
CVE-2018-160269.3Critical
CVE-2018-160259.3Critical
CVE-2018-160149.3Critical
CVE-2018-160089.3Critical
CVE-2018-160039.3Critical
CVE-2018-159949.3Critical
CVE-2018-159939.3Critical
CVE-2018-159929.3Critical
CVE-2018-159919.3Critical
CVE-2018-159909.3Critical
CVE-2018-160169.3Critical
CVE-2018-160009.3Critical
CVE-2018-159999.3Critical
CVE-2018-159889.3Critical
CVE-2018-197167.5Critical
CVE-2018-160219.3Critical
CVE-2018-128309.3Critical
CVE-2018-197174.3Warning
CVE-2018-197144.3Warning
CVE-2018-197124.3Warning
CVE-2018-197114.3Warning
CVE-2018-197104.3Warning
CVE-2018-197094.3Warning
CVE-2018-197065.0Warning
CVE-2018-197054.3Warning
CVE-2018-197044.3Warning
CVE-2018-197034.3Warning
CVE-2018-197015.0Warning
CVE-2018-196995.0Warning
CVE-2018-160475.0Warning
CVE-2018-160434.3Warning
CVE-2018-160415.0Warning
CVE-2018-160385.0Warning
CVE-2018-160355.0Warning
CVE-2018-160344.3Warning
CVE-2018-160334.3Warning
CVE-2018-160324.3Warning
CVE-2018-160315.0Warning
CVE-2018-160304.3Warning
CVE-2018-160284.3Warning
CVE-2018-160244.3Warning
CVE-2018-160234.3Warning
CVE-2018-160224.3Warning
CVE-2018-160204.3Warning
CVE-2018-160194.3Warning
CVE-2018-160174.3Warning
CVE-2018-160154.3Warning
CVE-2018-160134.3Warning
CVE-2018-160124.3Warning
CVE-2018-160104.3Warning
CVE-2018-160064.3Warning
CVE-2018-160054.3Warning
CVE-2018-160024.3Warning
CVE-2018-160014.3Warning
CVE-2018-159974.3Warning
CVE-2018-159964.3Warning
CVE-2018-159894.3Warning
CVE-2018-159854.3Warning
CVE-2018-159844.3Warning
CVE-2018-197194.3Warning
CVE-2018-160094.3Warning
CVE-2018-160074.3Warning
CVE-2018-159954.3Warning
CVE-2018-159864.3Warning
CVE-2018-160426.4High
CVE-2018-197284.3Warning

Exploitation:

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

References

Related

openvas 12
nessus 4
adobe 1
cvelist 45
prion 46
checkpoint_advisories 25
cve 43
zdi 20
ubuntucve 1
talosblog 1
talos 1
openvas
openvas
Adobe Acrobat Reader DC (Continuous Track) Security Updates (APSB18-34) - Windows
2018-12-13 00:00:00
Adobe Acrobat 2017 Security Updates (APSB18-41) - Windows
2018-12-13 00:00:00
Adobe Acrobat Reader DC (Continuous Track) Security Updates (APSB18-41) - Mac OS X
2018-12-13 00:00:00
nessus
nessus
Adobe Reader <= 15.006.30457 / 17.011.30106 / 19.008.20081 Multiple Vulnerabilities (APSB18-41)
2018-12-14 00:00:00
Adobe Reader <= 15.006.30456 / 17.011.30105 / 19.008.20080 Multiple Vulnerabilities (APSB18-41) (macOS)
2018-12-14 00:00:00
Adobe Acrobat <= 15.006.30457 / 17.011.30106 / 19.008.20081 Multiple Vulnerabilities (APSB18-41)
2018-12-14 00:00:00
adobe
adobe
APSB18-41 Security Updates Available for Adobe Acrobat and Reader
2018-12-11 00:00:00
cvelist
cvelist
CVE-2018-19699
2019-01-18 17:00:00
CVE-2018-19704
2019-01-18 17:00:00
CVE-2018-19713
2019-01-18 17:00:00
prion
prion
Null pointer dereference
2019-01-18 17:29:00
Out-of-bounds
2019-01-18 17:29:00
Out-of-bounds
2019-01-18 17:29:00
checkpoint_advisories
checkpoint_advisories
Adobe Acrobat and Reader Out-of-bounds read (APSB18-41: CVE-2018-19701)
2018-12-11 00:00:00
Adobe Acrobat and Reader Untrusted pointer dereference (APSB18-41: CVE-2018-19720)
2018-12-11 00:00:00
Adobe Acrobat and Reader Use After Free (APSB18-41: CVE-2018-19713)
2018-12-11 00:00:00
cve
cve
CVE-2018-16047
2019-01-18 17:29:00
CVE-2018-19717
2019-01-18 17:29:00
CVE-2018-19706
2019-01-18 17:29:00
zdi
zdi
Adobe Acrobat Pro DC HTML2PDF HTML Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
2018-12-12 00:00:00
Adobe Acrobat Pro DC ImageConversion XPS Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
2018-12-12 00:00:00
Adobe Reader DC Onix32 Untrusted Pointer Dereference Remote Code Execution Vulnerability
2018-12-12 00:00:00
ubuntucve
ubuntucve
CVE-2018-19728
2019-01-28 00:00:00
talosblog
talosblog
Vulnerability Spotlight: Adobe Acrobat Reader DC text field remote code execution vulnerability
2018-12-11 12:54:00
talos
talos
Adobe Acrobat Reader DC Text Field Value Remote Code Execution Vulnerability
2018-12-11 00:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.3 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.485 Medium

EPSS

Percentile

97.4%

JSON
Related for KLA11390
openvas12nessus4adobe1cvelist45prion46checkpoint_advisories25cve43zdi20ubuntucve1talosblog1talos1