Adobe Acrobat and Reader CVE-2018-12848 Arbitrary Code Execution Vulnerability

Bugtraq ID:	105360
Class:	Boundary Condition Error
CVE:	CVE-2018-12848
Remote:	Yes
Local:	No
Published:	Sep 19 2018 12:00AM
Updated:	Sep 19 2018 12:00AM
Credit:	Omri Herscovici via Vulnerability Research Check Point Software Technologies Ltd.
Vulnerable:	Adobe Acrobat Reader DC 2018.11.20058 Adobe Acrobat Reader DC 2018.11.20055 Adobe Acrobat Reader DC 2018.11.20040 Adobe Acrobat Reader DC 2018.11.20038 Adobe Acrobat Reader DC 2018.11.20035 Adobe Acrobat Reader DC 2017.11.30099 Adobe Acrobat Reader DC 2017.11.30080 Adobe Acrobat Reader DC 2015.6.30448 Adobe Acrobat Reader DC 2015.6.30434 Adobe Acrobat Reader DC 2015.6.30418 Adobe Acrobat Reader DC 2015.6.30417 Adobe Acrobat Reader DC 2015.6.30416 Adobe Acrobat Reader DC 2015.6.30413 Adobe Acrobat Reader DC 2015.6.30394 Adobe Acrobat Reader DC 2015.6.30392 Adobe Acrobat Reader DC 2015.6.30355 Adobe Acrobat Reader DC 2015.6.30352 Adobe Acrobat Reader DC 2015.6.30306 Adobe Acrobat Reader DC 2015.6.30060 Adobe Acrobat Reader DC 2015.006.30094 Adobe Acrobat Reader DC 2015.006.30033 Adobe Acrobat Reader 2017.11.30079 Adobe Acrobat Reader 2017.11.30078 Adobe Acrobat Reader 2017.11.30070 Adobe Acrobat Reader 2017.11.30068 Adobe Acrobat Reader 2017.11.30066 Adobe Acrobat Reader 2017.11.30059 Adobe Acrobat DC 2018.11.20058 Adobe Acrobat DC 2018.11.20055 Adobe Acrobat DC 2018.11.20040 Adobe Acrobat DC 2018.11.20038 Adobe Acrobat DC 2018.11.20035 Adobe Acrobat DC 2015.6.30448 Adobe Acrobat DC 2015.6.30434 Adobe Acrobat DC 2015.6.30418 Adobe Acrobat DC 2015.6.30417 Adobe Acrobat DC 2015.6.30416 Adobe Acrobat DC 2015.6.30413 Adobe Acrobat DC 2015.6.30394 Adobe Acrobat DC 2015.6.30392 Adobe Acrobat DC 2015.6.30355 Adobe Acrobat DC 2015.6.30352 Adobe Acrobat DC 2015.6.30306 Adobe Acrobat DC 2015.006.30094 Adobe Acrobat DC 2015.006.30060 Adobe Acrobat DC 2015.006.30033 Adobe Acrobat 2017.11.30099 Adobe Acrobat 2017.11.30096 Adobe Acrobat 2017.11.30080 Adobe Acrobat 2017.11.30079 Adobe Acrobat 2017.11.30078 Adobe Acrobat 2017.11.30070 Adobe Acrobat 2017.11.30068 Adobe Acrobat 2017.11.30066 Adobe Acrobat 2017.11.30059
Not Vulnerable:	Adobe Acrobat Reader DC 2018.11.20063 Adobe Acrobat Reader DC 2017.11.30102 Adobe Acrobat Reader DC 2015.6.30452 Adobe Acrobat DC 2018.11.20063 Adobe Acrobat DC 2015.6.30452 Adobe Acrobat 2017.11.30102

Adobe Acrobat and Reader CVE-2018-12848 Arbitrary Code Execution Vulnerability

Adobe Acrobat and Reader are prone to an unspecified arbitrary code-execution vulnerability.

Attackers can exploit this issue to execute arbitrary code in the context of the application. Failed attacks may cause a denial-of-service condition.

Adobe Acrobat and Reader CVE-2018-12848 Arbitrary Code Execution Vulnerability

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Adobe Acrobat and Reader CVE-2018-12848 Arbitrary Code Execution Vulnerability

References:

• Acrobat Homepage (Adobe)
  
• Adobe Homepage (Adobe)
  
• Adobe Reader Homepage (Adobe)
  
• APSB18-34: Security bulletin for Adobe Acrobat and Reader (Adobe)