CVE-2018-4879

The CVE-2018-4879 entry concerns Adobe Acrobat Reader (and related versions) with a vulnerability in the EMF+ image conversion path. The issue arises from a buffer overrun in the module that processes EMF+ data, allowing potential corruption of sensitive data or execution of arbitrary code. Affec...

CVE-2018-4879

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. The vulnerability is caused by the computation that writes data past the end of the intended buffer; the computation is part of the image...

CVE-2018-4889

CVE-2018-4889 affects Adobe Acrobat Reader and relates to an out-of-bounds read during XPS image conversion caused by reading data past the end of a buffer. Affected products include Adobe Acrobat Reader 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier. The v...

CVE-2018-4888

Adobe Acrobat Reader (including DC, and older versions such as 2018.009.20050, 2017.011.30070, 2015.006.30394 and earlier) is affected by CVE-2018-4888 due to a use-after-free in the XFA engine triggered by a crafted PDF file. The issue stems from a dangling reference left when freeing an object ...

CVE-2018-4911

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript API related to bookmark functionality. The...

CVE-2018-4914

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of...

CVE-2018-4886

CVE-2018-4886 affects Adobe Acrobat Reader and related Flash/EMF processing: the issue is a buffer overread in the image conversion engine when handling Enhanced Metafile Format (EMF) data, specifically with bitmap rectangles. This can cause sensitive data exposure. The affected products are Adob...

CVE-2018-4880

CVE-2018-4880 affects Adobe Acrobat Reader/Acrobat versions: 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier. Root cause is a computation that reads data past the end of the target buffer within the U3D data parsing in the conversion module; this can lead to...

CVE-2018-4883

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs because of computation that reads data that is past the end of the target buffer; the computation is part of the...

CVE-2018-4883

The CVE-2018-4883 issue affects Adobe Acrobat Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier. It arises from a computation that reads data past the end of the target buffer within the EMF image conversion engine, potentially exposing sensiti...

CVE-2018-4881

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of...

CVE-2018-4880

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of...

CVE-2018-4907

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of...

CVE-2018-4905

Technical details about CVE-2018-4905 are not publicly provided in the supplied documents. Monitor for updates from vendors and advisories for affected products and remediation guidance.

CVE-2018-4872

Adobe Acrobat Reader (various affected versions: 2018.009.20050 and earlier; 2017.011.30070 and earlier; 2015.006.30394 and earlier) contains a security bypass that enables sandbox escape, due to the way a cross call is handled. The provided documents do not include explicit exploit steps, impact...

CVE-2018-4892

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JBIG2 decoder. The vulnerability is triggered by a crafted PDF...

CVE-2018-4890

CVE-2018-4890 affects Adobe Acrobat Reader implementations (2018.009.20050 and earlier, 2017.011.30070 and earlier, 2015.006.30394 and earlier). The issue is a heap overflow in the image conversion engine when processing JPEG data embedded in an XPS file. Consequences described include code corru...

CVE-2018-4902

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the rendering engine. The vulnerability is triggered by a crafted P...

CVE-2018-4890

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a heap overflow vulnerability in the image conversion engine, when handling JPEG data embedded within...

CVE-2018-4913

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the XFA engine, related to DOM manipulation. The vulnerability is...