Adobe Acrobat and Reader APSB18-30 Type Confusion Multiple Arbitrary Code Execution Vulnerabilities
BID:105443
CVE-2018-12835 | CVE-2018-12858 | CVE-2018-12876 |Info
Adobe Acrobat and Reader APSB18-30 Type Confusion Multiple Arbitrary Code Execution Vulnerabilities
| Bugtraq ID: | 105443 |
| Class: | Unknown |
| CVE: |
CVE-2018-12876 CVE-2018-12858 CVE-2018-12835 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 01 2018 12:00AM |
| Updated: | Oct 01 2018 12:00AM |
| Credit: | Lin Wang of Beihang University, Sebastian Apelt siberas working with Trend Micro's Zero Day Initiative, and Esteban Ruiz (mr_me) of Source Incite working with iDefense Labs |
| Vulnerable: |
Adobe Acrobat Reader DC 2018.11.20063 Adobe Acrobat Reader DC 2018.11.20058 Adobe Acrobat Reader DC 2018.11.20055 Adobe Acrobat Reader DC 2018.11.20040 Adobe Acrobat Reader DC 2018.11.20038 Adobe Acrobat Reader DC 2018.11.20035 Adobe Acrobat Reader DC 2018.9.20050 Adobe Acrobat Reader DC 2018.9.20044 Adobe Acrobat Reader DC 2018.8.20071 Adobe Acrobat Reader DC 2017.12.20098 Adobe Acrobat Reader DC 2017.12.20093 Adobe Acrobat Reader DC 2017.11.30102 Adobe Acrobat Reader DC 2017.11.30099 Adobe Acrobat Reader DC 2017.11.30080 Adobe Acrobat Reader DC 2017.9.20058 Adobe Acrobat Reader DC 2017.9.20044 Adobe Acrobat Reader DC 2015.8.20082 Adobe Acrobat Reader DC 2015.6.30452 Adobe Acrobat Reader DC 2015.6.30448 Adobe Acrobat Reader DC 2015.6.30434 Adobe Acrobat Reader DC 2015.6.30418 Adobe Acrobat Reader DC 2015.6.30417 Adobe Acrobat Reader DC 2015.6.30416 Adobe Acrobat Reader DC 2015.6.30413 Adobe Acrobat Reader DC 2015.6.30394 Adobe Acrobat Reader DC 2015.6.30392 Adobe Acrobat Reader DC 2015.6.30355 Adobe Acrobat Reader DC 2015.6.30352 Adobe Acrobat Reader DC 2015.6.30306 Adobe Acrobat Reader DC 2015.6.30060 Adobe Acrobat Reader DC 2015.009.20069 Adobe Acrobat Reader DC 2015.007.20033 Adobe Acrobat Reader DC 2015.006.30094 Adobe Acrobat Reader DC 2015.006.30033 Adobe Acrobat DC 2018.11.20063 Adobe Acrobat DC 2018.11.20058 Adobe Acrobat DC 2018.11.20055 Adobe Acrobat DC 2018.11.20040 Adobe Acrobat DC 2018.11.20038 Adobe Acrobat DC 2018.11.20035 Adobe Acrobat DC 2018.9.20050 Adobe Acrobat DC 2018.9.20044 Adobe Acrobat DC 2017.12.20098 Adobe Acrobat DC 2017.12.20093 Adobe Acrobat DC 2017.9.20058 Adobe Acrobat DC 2017.9.20044 Adobe Acrobat DC 2015.6.30452 Adobe Acrobat DC 2015.6.30448 Adobe Acrobat DC 2015.6.30434 Adobe Acrobat DC 2015.6.30418 Adobe Acrobat DC 2015.6.30417 Adobe Acrobat DC 2015.6.30416 Adobe Acrobat DC 2015.6.30413 Adobe Acrobat DC 2015.6.30394 Adobe Acrobat DC 2015.6.30392 Adobe Acrobat DC 2015.6.30355 Adobe Acrobat DC 2015.6.30352 Adobe Acrobat DC 2015.6.30306 Adobe Acrobat DC 2015.009.20069 Adobe Acrobat DC 2015.008.20082 Adobe Acrobat DC 2015.007.20033 Adobe Acrobat DC 2015.006.30094 Adobe Acrobat DC 2015.006.30060 Adobe Acrobat DC 2015.006.30033 Adobe Acrobat 2017.11.30102 Adobe Acrobat 2017.11.30099 Adobe Acrobat 2017.11.30096 Adobe Acrobat 2017.11.30080 Adobe Acrobat 2017.11.30079 Adobe Acrobat 2017.11.30078 Adobe Acrobat 2017.11.30070 Adobe Acrobat 2017.11.30068 Adobe Acrobat 2017.11.30066 Adobe Acrobat 2017.11.30059 Adobe Acrobat 2017.8.30051 |
| Not Vulnerable: |
Adobe Acrobat Reader DC 2019.8.20071 Adobe Acrobat Reader DC 2017.11.30105 Adobe Acrobat Reader DC 2015.006.30456 Adobe Acrobat DC 2019.8.20071 Adobe Acrobat DC 2015.6.30456 Adobe Acrobat 2017.11.30105 |
Discussion
Adobe Acrobat and Reader APSB18-30 Type Confusion Multiple Arbitrary Code Execution Vulnerabilities
Adobe Acrobat and Reader are prone to multiple arbitrary code-execution vulnerabilities.
Successfully exploiting these issues allows attackers to execute arbitrary code in the context of the current user. Failed exploits will result in denial-of-service conditions.
The following products and versions are vulnerable:
Adobe Acrobat DC 2018.011.20063 and and prior
Adobe Acrobat Reader DC 2018.011.20063 and prior
Adobe Acrobat 2017.011.30102 and prior
Adobe Acrobat Reader 2017.011.30102 and prior
Adobe Acrobat DC 2015.006.30452 and prior
Adobe Acrobat Reader DC 2015.006.30452 and prior
Adobe Acrobat and Reader are prone to multiple arbitrary code-execution vulnerabilities.
Successfully exploiting these issues allows attackers to execute arbitrary code in the context of the current user. Failed exploits will result in denial-of-service conditions.
The following products and versions are vulnerable:
Adobe Acrobat DC 2018.011.20063 and and prior
Adobe Acrobat Reader DC 2018.011.20063 and prior
Adobe Acrobat 2017.011.30102 and prior
Adobe Acrobat Reader 2017.011.30102 and prior
Adobe Acrobat DC 2015.006.30452 and prior
Adobe Acrobat Reader DC 2015.006.30452 and prior
Exploit / POC
Adobe Acrobat and Reader APSB18-30 Type Confusion Multiple Arbitrary Code Execution Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Adobe Acrobat and Reader APSB18-30 Type Confusion Multiple Arbitrary Code Execution Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Adobe Acrobat and Reader APSB18-30 Type Confusion Multiple Arbitrary Code Execution Vulnerabilities
References:
References: