Lucene search

K
nvd[email protected]NVD:CVE-2019-16464
HistoryDec 19, 2019 - 4:16 p.m.

CVE-2019-16464

2019-12-1916:16:42
CWE-416
web.nvd.nist.gov
6

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.009

Percentile

83.0%

Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Affected configurations

Nvd
Node
adobeacrobat_dcRange15.006.3006015.006.30508classic
OR
adobeacrobat_dcRange15.008.2008219.021.20058continuous
OR
adobeacrobat_dcRange17.011.3005917.011.30156classic
OR
adobeacrobat_reader_dcRange15.006.3006015.006.30508classic
OR
adobeacrobat_reader_dcRange15.008.2008219.021.20058continuous
OR
adobeacrobat_reader_dcRange17.011.3005917.011.30156classic
AND
applemacosMatch-
OR
microsoftwindowsMatch-

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.009

Percentile

83.0%