CVE-2018-4881

CVE-2018-4881 affects Adobe Acrobat Reader versions listed in the initial entry (e.g., 2018.009.20050 and earlier, 2017.011.30070 and earlier, 2015.006.30394 and earlier). The issue arises from a computation that reads data past the end of the target buffer in the BMP-related image conversion mod...

CVE-2018-4890

CVE-2018-4890 affects Adobe Acrobat Reader implementations (2018.009.20050 and earlier, 2017.011.30070 and earlier, 2015.006.30394 and earlier). The issue is a heap overflow in the image conversion engine when processing JPEG data embedded in an XPS file. Consequences described include code corru...

CVE-2018-4913

Adobe Acrobat Reader (various affected builds: 2018.009.20050 and earlier; 2017.011.30070 and earlier; 2015.006.30394 and earlier) contains a use-after-free vulnerability in the XFA engine triggered by crafted PDF XFA script definitions, related to DOM manipulation. Successful exploitation could ...

CVE-2018-4883

The CVE-2018-4883 issue affects Adobe Acrobat Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier. It arises from a computation that reads data past the end of the target buffer within the EMF image conversion engine, potentially exposing sensiti...

CVE-2018-4916

Adobe Acrobat Reader vulnerabilities CVE-2018-4916 affect versions up to 2018.009.20050, 2017.011.30070, and 2015.006.30394. The issue stems from a calculation in the TIFF image data handling within the image conversion module, which can write past the end of the intended buffer. Consequences inc...

CVE-2018-4891

CVE-2018-4891 affects Adobe Acrobat Reader (and related products) up to versions 2018.009.20050, 2017.011.30070, and 2015.006.30394. The issue arises from a computation in the XPS module that handles TIFF data, which reads past the end of the target buffer. This can lead to exposure of sensitive ...

Vulnerability Spotlight: Adobe Acrobat Reader DC Document ID Remote Code Execution Vulnerability

Discovered by Aleksandar Nikolic of Cisco Talos Overview Today, Talos is releasing details of a new vulnerability within Adobe Acrobat Reader DC. Adobe Acrobat Reader is the most popular and most feature-rich PDF reader. It has a big user base, is usually a default PDF reader on systems and...

Adobe Acrobat Reader DC Document ID Remote Code Execution Vulnerability

Summary A specific Javascript script embedded in a PDF file can cause the document ID field to be used in an unbounded copy operation leading to stack-based buffer overflow when opening a specially crafted PDF document in Adobe Acrobat Reader DC 2018.009.20044. This stack overflow can lead to...

Adobe Acrobat Reader DC (Continuous Track) Detection (Mac OS X SSH Login)

Detects the installed version of Adobe Acrobat Reader DC Continuous Track. The script logs in via ssh, searches for folder SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Adobe Acrobat Reader DC (Continuous Track) Detection (Windows SMB Login)

Detects the installed version of Adobe Acrobat Reader DC Continuous Track. The script logs in via smb, searches for SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Adobe Acrobat Reader DC (Classic Track) Multiple Vulnerabilities (APSB18-02) - Windows

Adobe Acrobat Reader DC Classic Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Acrobat Reader DC (Continuous Track) Multiple Vulnerabilities (APSB18-02) - Mac OS X

Adobe Acrobat Reader DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Acrobat Reader 2017 Multiple Vulnerabilities (APSB18-02) - Windows

Adobe Acrobat Reader 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Acrobat Reader 2017 Multiple Vulnerabilities (APSB18-02) - Mac OS X

Adobe Acrobat Reader 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Acrobat Reader DC (Classic Track) Multiple Vulnerabilities (APSB18-02) - Mac OS X

Adobe Acrobat Reader DC Classic Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Acrobat Reader DC (Continuous Track) Multiple Vulnerabilities (APSB18-02) - Windows

Adobe Acrobat Reader DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Acrobat Reader DC (Classic Track) Detection (Windows SMB Login)

Detects the installed version of Adobe Acrobat Reader DC Classic Track. The script logs in via smb, searches for SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Adobe Acrobat Reader DC (Classic Track) Detection (Mac OS X SSH Login)

Detects the installed version of Adobe Acrobat Reader DC Classic Track. The script logs in via ssh, searches for folder SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Adobe Acrobat and Reader Out-of-bounds read (APSB18-02: CVE-2018-4889)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader Out-of-bounds read (APSB18-02: CVE-2018-4896)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...