Adobe Acrobat and Reader APSB18-02 Multiple Remote Code Execution Vulnerabilities
BID:102994
CVE-2018-4879 | CVE-2018-4895 | CVE-2018-4898 | CVE-2018-4901 | CVE-2018-4915 | CVE-2018-4916 | CVE-2018-4918 |Info
Adobe Acrobat and Reader APSB18-02 Multiple Remote Code Execution Vulnerabilities
| Bugtraq ID: | 102994 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2018-4879 CVE-2018-4895 CVE-2018-4898 CVE-2018-4901 CVE-2018-4915 CVE-2018-4916 CVE-2018-4918 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 13 2018 12:00AM |
| Updated: | Feb 13 2018 12:00AM |
| Credit: | Lin Wang and willJ of Tencent PC Manager working with Trend Micro's Zero Day Initiative, Aleksandar Nikolic of Cisco Talos, Anonymously reported via Trend Micro's Zero Day Initiative, riusksk of Tencent Security Platform Department working with Trend Micro |
| Vulnerable: |
Adobe Acrobat Reader DC 2018.9.20050 Adobe Acrobat Reader DC 2018.9.20044 Adobe Acrobat Reader DC 2017.12.20098 Adobe Acrobat Reader DC 2017.12.20093 Adobe Acrobat Reader DC 2017.9.20058 Adobe Acrobat Reader DC 2017.9.20044 Adobe Acrobat Reader DC 2015.8.20082 Adobe Acrobat Reader DC 2015.6.30394 Adobe Acrobat Reader DC 2015.6.30392 Adobe Acrobat Reader DC 2015.6.30355 Adobe Acrobat Reader DC 2015.6.30352 Adobe Acrobat Reader DC 2015.6.30306 Adobe Acrobat Reader DC 2015.6.30060 Adobe Acrobat Reader DC 15.23.20070 Adobe Acrobat Reader DC 15.23.20053 Adobe Acrobat Reader DC 15.20.20042 Adobe Acrobat Reader DC 15.20.20039 Adobe Acrobat Reader DC 15.17.20053 Adobe Acrobat Reader DC 15.17.20050 Adobe Acrobat Reader DC 15.16.20045 Adobe Acrobat Reader DC 15.16.20039 Adobe Acrobat Reader DC 15.10.20060 Adobe Acrobat Reader DC 15.10.20059 Adobe Acrobat Reader DC 15.9.20077 Adobe Acrobat Reader DC 15.6.30280 Adobe Acrobat Reader DC 15.6.30279 Adobe Acrobat Reader DC 15.6.30244 Adobe Acrobat Reader DC 15.6.30243 Adobe Acrobat Reader DC 15.6.30201 Adobe Acrobat Reader DC 15.6.30198 Adobe Acrobat Reader DC 15.6.30174 Adobe Acrobat Reader DC 15.6.30172 Adobe Acrobat Reader DC 15.6.30121 Adobe Acrobat Reader DC 15.6.30097 Adobe Acrobat Reader DC 2015.009.20069 Adobe Acrobat Reader DC 2015.007.20033 Adobe Acrobat Reader DC 2015.006.30094 Adobe Acrobat Reader DC 2015.006.30033 Adobe Acrobat Reader DC 15.010.20056 Adobe Acrobat Reader DC 15.006.30119 Adobe Acrobat Reader 2017.11.30070 Adobe Acrobat Reader 2017.11.30068 Adobe Acrobat Reader 2017.11.30066 Adobe Acrobat Reader 2017.11.30059 Adobe Acrobat DC 2018.9.20050 Adobe Acrobat DC 2018.9.20044 Adobe Acrobat DC 2017.12.20098 Adobe Acrobat DC 2017.12.20093 Adobe Acrobat DC 2017.9.20058 Adobe Acrobat DC 2017.9.20044 Adobe Acrobat DC 2015.6.30394 Adobe Acrobat DC 2015.6.30392 Adobe Acrobat DC 2015.6.30355 Adobe Acrobat DC 2015.6.30352 Adobe Acrobat DC 2015.6.30306 Adobe Acrobat DC 15.23.20070 Adobe Acrobat DC 15.23.20053 Adobe Acrobat DC 15.20.20042 Adobe Acrobat DC 15.20.20039 Adobe Acrobat DC 15.17.20053 Adobe Acrobat DC 15.17.20050 Adobe Acrobat DC 15.16.20045 Adobe Acrobat DC 15.16.20039 Adobe Acrobat DC 15.10.20060 Adobe Acrobat DC 15.10.20059 Adobe Acrobat DC 15.9.20077 Adobe Acrobat DC 15.6.30280 Adobe Acrobat DC 15.6.30279 Adobe Acrobat DC 15.6.30244 Adobe Acrobat DC 15.6.30243 Adobe Acrobat DC 15.6.30201 Adobe Acrobat DC 15.6.30198 Adobe Acrobat DC 15.6.30174 Adobe Acrobat DC 15.6.30172 Adobe Acrobat DC 15.6.30121 Adobe Acrobat DC 15.6.30097 Adobe Acrobat DC 2015.009.20069 Adobe Acrobat DC 2015.008.20082 Adobe Acrobat DC 2015.007.20033 Adobe Acrobat DC 2015.006.30094 Adobe Acrobat DC 2015.006.30060 Adobe Acrobat DC 2015.006.30033 Adobe Acrobat DC 15.010.20056 Adobe Acrobat DC 15.006.30119 Adobe Acrobat 2017.11.30070 Adobe Acrobat 2017.11.30068 Adobe Acrobat 2017.11.30066 Adobe Acrobat 2017.11.30059 |
| Not Vulnerable: |
Adobe Acrobat Reader DC 2018.11.20035 Adobe Acrobat Reader DC 2015.6.30416 Adobe Acrobat Reader DC 2015.6.30413 Adobe Acrobat Reader 2017.11.30078 Adobe Acrobat DC 2018.11.20035 Adobe Acrobat DC 2015.6.30416 Adobe Acrobat DC 2015.6.30413 Adobe Acrobat 2017.11.30078 |
Discussion
Adobe Acrobat and Reader APSB18-02 Multiple Remote Code Execution Vulnerabilities
Adobe Acrobat and Reader are prone to multiple remote code-execution vulnerabilities.
Attackers can exploit these issues to execute arbitrary code within the context of the application. Failed attempts will likely cause a denial-of-service condition.
Adobe Acrobat and Reader are prone to multiple remote code-execution vulnerabilities.
Attackers can exploit these issues to execute arbitrary code within the context of the application. Failed attempts will likely cause a denial-of-service condition.
Exploit / POC
Adobe Acrobat and Reader APSB18-02 Multiple Remote Code Execution Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Adobe Acrobat and Reader APSB18-02 Multiple Remote Code Execution Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Adobe Acrobat and Reader APSB18-02 Multiple Remote Code Execution Vulnerabilities
References:
References:
- Acrobat Homepage (Adobe)
- Adobe Homepage (Adobe)
- Adobe Reader Homepage (Adobe)
- APSB18-02: Security updates available for Adobe Acrobat and Reader | APSB18-02 (Adobe)