Adobe Acrobat and Reader NT LAN Manager CVE-2018-4993 Information Disclosure Vulnerability

Bugtraq ID:	104177
Class:	Boundary Condition Error
CVE:	CVE-2018-4993
Remote:	Yes
Local:	No
Published:	May 14 2018 12:00AM
Updated:	May 14 2018 12:00AM
Credit:	Assaf Baharav of Check Point Software Technologies
Vulnerable:	Microsoft Windows Server 2016 0 Microsoft Windows 10 version 1703 for x64-based Systems 0 Microsoft Windows 10 version 1703 for 32-bit Systems 0 Microsoft Windows 10 Version 1607 for x64-based Systems 0 Microsoft Windows 10 Version 1607 for 32-bit Systems 0 Microsoft Windows 10 version 1511 for x64-based Systems 0 Microsoft Windows 10 version 1511 for 32-bit Systems 0 Microsoft Windows 10 for x64-based Systems 0 Microsoft Windows 10 for 32-bit Systems 0 Adobe Acrobat Reader DC 2018.11.20038 Adobe Acrobat Reader DC 2018.11.20035 Adobe Acrobat Reader DC 2015.6.30417 Adobe Acrobat Reader DC 2015.6.30416 Adobe Acrobat Reader DC 2015.6.30413 Adobe Acrobat Reader DC 2015.6.30394 Adobe Acrobat Reader DC 2015.6.30392 Adobe Acrobat Reader DC 2015.6.30355 Adobe Acrobat Reader DC 2015.6.30352 Adobe Acrobat Reader DC 2015.6.30306 Adobe Acrobat Reader DC 2015.6.30060 Adobe Acrobat Reader DC 2015.006.30094 Adobe Acrobat Reader DC 2015.006.30033 Adobe Acrobat Reader 2017.11.30079 Adobe Acrobat Reader 2017.11.30078 Adobe Acrobat Reader 2017.11.30070 Adobe Acrobat Reader 2017.11.30068 Adobe Acrobat Reader 2017.11.30066 Adobe Acrobat Reader 2017.11.30059 Adobe Acrobat DC 2018.11.20038 Adobe Acrobat DC 2018.11.20035 Adobe Acrobat DC 2015.6.30417 Adobe Acrobat DC 2015.6.30416 Adobe Acrobat DC 2015.6.30413 Adobe Acrobat DC 2015.6.30394 Adobe Acrobat DC 2015.6.30392 Adobe Acrobat DC 2015.6.30355 Adobe Acrobat DC 2015.6.30352 Adobe Acrobat DC 2015.6.30306 Adobe Acrobat DC 2015.006.30094 Adobe Acrobat DC 2015.006.30060 Adobe Acrobat DC 2015.006.30033 Adobe Acrobat 2017.11.30079 Adobe Acrobat 2017.11.30078 Adobe Acrobat 2017.11.30070 Adobe Acrobat 2017.11.30068 Adobe Acrobat 2017.11.30066 Adobe Acrobat 2017.11.30059
Not Vulnerable:	Adobe Acrobat Reader DC 2018.11.20040 Adobe Acrobat Reader DC 2015.6.30418 Adobe Acrobat Reader 2017.11.30080 Adobe Acrobat DC 2018.11.20040 Adobe Acrobat DC 2015.6.30418 Adobe Acrobat 2017.11.30080

Adobe Acrobat and Reader NT LAN Manager CVE-2018-4993 Information Disclosure Vulnerability

Adobe Acrobat and Reader are prone to an information-disclosure vulnerability.

An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks.

Adobe Acrobat and Reader NT LAN Manager CVE-2018-4993 Information Disclosure Vulnerability

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Adobe Acrobat and Reader NT LAN Manager CVE-2018-4993 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Adobe Acrobat and Reader NT LAN Manager CVE-2018-4993 Information Disclosure Vulnerability

References:

• Acrobat Homepage (Adobe)
  
• Adobe Homepage (Adobe)
  
• Adobe Reader Homepage (Adobe)
  
• ADV170014 | Optional Windows NTLM SSO authentication changes (Microsoft)
  
• APSB18-09: Security updates available for Adobe Acrobat and Reader (Adobe)
  
• Mitigation of NTLM dictionary attacks | Acrobat DC, Acrobat Reader DC (Adobe)