Lucene search

Kaspersky LabKLA11622

HistoryNov 18, 2019 - 12:00 a.m.

KLA11622 Multiple vulnerabilities in Adobe Reader and Adobe Acrobat Reader

2019-11-1800:00:00

Kaspersky Lab

threats.kaspersky.com

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

59.5%

JSON

Detect date:

11/18/2019

Severity:

Critical

Description:

Multiple vulnerabilities were found in Adobe Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges.

Affected products:

Acrobat DC 2019.021.20056 and earlier versions
Acrobat Reader DC 2019.021.20056 and earlier versions
Acrobat 2017 2017.011.30152 and earlier versions
Acrobat 2017 2017.011.30155 and earlier version
Acrobat Reader 2017 2017.011.30152 and earlier versions
Acrobat 2015 2015.006.30505 and earlier versions
Acrobat Reader 2015 2015.006.30505 and earlier versions

Solution:

Update to the latest version
Download Adobe Acrobat Reader DC

Original advisories:

Apsb19-55

Impacts:

ACE

Related products:

Adobe Reader

CVE-IDS:

CVE-2019-16449

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16444

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16449

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16456

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16457

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16458

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16461

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16465

get.adobe.com/ru/reader/

helpx.adobe.com/security/products/acrobat/apsb19-55.html

statistics.securelist.com/vulnerability-scan/month

threats.kaspersky.com/en/product/Adobe-Acrobat-2017/

threats.kaspersky.com/en/product/Adobe-Acrobat-DC-Classic/

threats.kaspersky.com/en/product/Adobe-Acrobat-DC-Continuous/

threats.kaspersky.com/en/product/Adobe-Acrobat-Reader-2017/

threats.kaspersky.com/en/product/Adobe-Acrobat-Reader-DC-Classic/

threats.kaspersky.com/en/product/Adobe-Acrobat-Reader-DC-Continuous/

threats.kaspersky.com/en/product/Adobe-Acrobat-Reader/

threats.kaspersky.com/en/product/Adobe-Acrobat/

threats.kaspersky.com/en/product/Adobe-Reader/

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

59.5%

JSON

Related for KLA11622