CVE-2018-4961: Use After Free

🗓️ 09 Jul 2018 00:00:00Reported by Rapid7Type

Use-after-free in Adobe Acrobat and Reader up to 2018.011.20038 enables code execution.

Reporter	Title	Published	Views	Family All 25
Tenable Nessus	Adobe Acrobat < 2015.006.30418 / 2017.011.30080 / 2018.011.20040 Multiple Vulnerabilities (APSB18-09)	17 May 201800:00	–	nessus
Tenable Nessus	Adobe Reader < 2015.006.30418 / 2017.011.30080 / 2018.011.20040 Multiple Vulnerabilities (APSB18-09)	17 May 201800:00	–	nessus
Tenable Nessus	Adobe Acrobat < 2015.006.30418 / 2017.011.30080 / 2018.011.20040 Multiple Vulnerabilities (APSB18-09) (macOS)	17 May 201800:00	–	nessus
Tenable Nessus	Adobe Reader < 2015.006.30418 / 2017.011.30080 / 2018.011.20040 Multiple Vulnerabilities (APSB18-09) (macOS)	17 May 201800:00	–	nessus
Tenable Nessus	Adobe Acrobat < 2015.006.30418 / 2017.011.30080 / 2018.011.20040 Multiple Vulnerabilities (APSB18-09) (macOS)	12 Sep 202400:00	–	nessus
Tenable Nessus	Adobe Reader < 2015.006.30418 / 2017.011.30080 / 2018.011.20040 Multiple Vulnerabilities (APSB18-09) (macOS)	12 Sep 202400:00	–	nessus
BDU FSTEC	The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader Document Cloud 2017, and Adobe Acrobat Reader Document Cloud 2015 are related to memory usage after it is freed. This allows attackers to execute arbitrary code in the context of the current user.	30 Apr 202500:00	–	bdu_fstec
CNVD	Adobe Acrobat/Reader Memory Misreference Vulnerability (CNVD-2018-10471)	16 May 201800:00	–	cnvd
Check Point Advisories	Adobe Acrobat and Reader Use After Free (APSB18-09: CVE-2018-4961)	8 May 201800:00	–	checkpoint_advisories
CVE	CVE-2018-4961	9 Jul 201819:00	–	cve