Kaspersky LabKLA11531KLA11531 Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
8.3 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.874 High
EPSS
Percentile
98.6%
Detect date:
08/14/2019
Severity:
High
Description:
Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to obtain sensitive information and execute arbitrary code, bypass security restrictions.
Exploitation:
Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.
Affected products:
Adobe Acrobat DC (Continuous track) earlier than 2019.012.20036
Adobe Acrobat Reader DC (Continuous track) earlier than 2019.012.20036
Adobe Acrobat 2017 (Classic 2017 track) earlier than 2017.011.30144
Adobe Acrobat Reader 2017 (Classic 2017 track) earlier than 2017.011.30144
Adobe Acrobat DC (Classic 2015 track) earlier than 2015.006.30499
Adobe Acrobat Reader 2017 (Classic 2015 track) earlier than 2015.006.30499
Solution:
Update to the latest version
Download Adobe Acrobat Reader DC
Original advisories:
Impacts:
ACE
Related products:
Adobe Acrobat Reader DC Continuous
CVE-IDS:
CVE-2019-80775.0Warning
CVE-2019-80945.0Warning
CVE-2019-80955.0Warning
CVE-2019-80965.0Warning
CVE-2019-81025.0Warning
CVE-2019-81035.0Warning
CVE-2019-81045.0Warning
CVE-2019-81055.0Warning
CVE-2019-81065.0Warning
CVE-2019-80025.0Warning
CVE-2019-80045.0Warning
CVE-2019-80055.0Warning
CVE-2019-80075.0Warning
CVE-2019-80105.0Warning
CVE-2019-80115.0Warning
CVE-2019-80125.0Warning
CVE-2019-80185.0Warning
CVE-2019-80205.0Warning
CVE-2019-80215.0Warning
CVE-2019-80325.0Warning
CVE-2019-80354.3Warning
CVE-2019-80374.3Warning
CVE-2019-80404.3Warning
CVE-2019-80435.0Warning
CVE-2019-80524.3Warning
CVE-2019-80987.5Critical
CVE-2019-81007.5Critical
CVE-2019-79657.5Critical
CVE-2019-80086.8High
CVE-2019-80097.5Critical
CVE-2019-80167.5Critical
CVE-2019-80227.5Critical
CVE-2019-80237.5Critical
CVE-2019-80276.8High
CVE-2019-80037.5Critical
CVE-2019-80136.8High
CVE-2019-80247.5Critical
CVE-2019-80257.5Critical
CVE-2019-80267.5Critical
CVE-2019-80287.5Critical
CVE-2019-80297.5Critical
CVE-2019-80307.5Critical
CVE-2019-80317.5Critical
CVE-2019-80336.8High
CVE-2019-80346.8High
CVE-2019-80367.5Critical
CVE-2019-80386.8High
CVE-2019-80396.8High
CVE-2019-80477.5Critical
CVE-2019-80514.3Warning
CVE-2019-80534.3Warning
CVE-2019-80544.3Warning
CVE-2019-80557.5Critical
CVE-2019-80564.3Warning
CVE-2019-80576.8High
CVE-2019-80584.3Warning
CVE-2019-80594.3Warning
CVE-2019-80617.5Critical
CVE-2019-80146.8High
CVE-2019-80157.5Critical
CVE-2019-80417.5Critical
CVE-2019-80427.5Critical
CVE-2019-80467.5Critical
CVE-2019-80507.5Critical
CVE-2019-80487.5Critical
CVE-2019-80447.5Critical
CVE-2019-80995.0Warning
CVE-2019-81015.0Warning
CVE-2019-80975.0Warning
CVE-2019-80196.8High
CVE-2019-80067.5Critical
CVE-2019-80177.5Critical
CVE-2019-80457.5Critical
CVE-2019-80666.8High
CVE-2019-82496.8High
CVE-2019-82506.8High
CVE-2019-82514.3Warning
CVE-2019-82524.3Warning
CVE-2019-82577.5Critical
References
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7965
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8002
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8003
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8004
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8005
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8006
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8007
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8008
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8009
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8010
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8011
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8012
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8013
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8014
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8015
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8016
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8017
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8018
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8019
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8020
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8021
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8022
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8023
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8024
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8025
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8026
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8027
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8028
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8029
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8030
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8031
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8032
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8033
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8034
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8035
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8036
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8037
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8038
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8039
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8040
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8041
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8042
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8043
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8044
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8045
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8046
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8047
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8048
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8050
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8051
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8052
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8053
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8054
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8055
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8056
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8057
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8058
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8059
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8061
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8066
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8077
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8094
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8095
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8096
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8097
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8098
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8099
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8100
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8101
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8102
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8103
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8104
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8105
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8106
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8249
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8250
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8251
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8252
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8257
get.adobe.com/ru/reader/
helpx.adobe.com/security/products/acrobat/apsb19-41.html
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/class/Exploit/
threats.kaspersky.com/en/product/Adobe-Acrobat-2017/
threats.kaspersky.com/en/product/Adobe-Acrobat-DC-Classic/
threats.kaspersky.com/en/product/Adobe-Acrobat-DC-Continuous/
threats.kaspersky.com/en/product/Adobe-Acrobat-Reader-2017/
threats.kaspersky.com/en/product/Adobe-Acrobat-Reader-DC-Classic/
threats.kaspersky.com/en/product/Adobe-Acrobat-Reader-DC-Continuous/
Related
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
8.3 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.874 High
EPSS
Percentile
98.6%