Adobe Acrobat and Reader APSB18-41 Multiple Information Disclosure Vulnerabilities

Bugtraq ID:	106162
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2018-19717 CVE-2018-19714 CVE-2018-19712 CVE-2018-19711 CVE-2018-19710 CVE-2018-19709 CVE-2018-19706 CVE-2018-19705 CVE-2018-19704 CVE-2018-19703 CVE-2018-19701 CVE-2018-19699 CVE-2018-16047 CVE-2018-16043 CVE-2018-16041 CVE-2018-16038 CVE-2018-16035 CVE-2018-16034 CVE-2018-16033 CVE-2018-16032 CVE-2018-16031 CVE-2018-16030 CVE-2018-16028 CVE-2018-16024 CVE-2018-16023 CVE-2018-16022 CVE-2018-16020 CVE-2018-16019 CVE-2018-16017 CVE-2018-16015 CVE-2018-16013 CVE-2018-16012 CVE-2018-16010 CVE-2018-16006 CVE-2018-16005 CVE-2018-16002 CVE-2018-16001 CVE-2018-15997 CVE-2018-15996 CVE-2018-15989 CVE-2018-15985 CVE-2018-15984 CVE-2018-19719
Remote:	Yes
Local:	No
Published:	Dec 11 2018 12:00AM
Updated:	Dec 11 2018 12:00AM
Credit:	Bo Qu of Palo Alto Networks and Heige of Knownsec 404 Security Team, Kamlapati Choubey via Trend Micro's Zero Day Initiative, kdot working with Trend Micro's Zero Day Initiative, Hui Gao and Zhibin Zhang of Palo Alto Networks, Ke Liu of Tencent's Xuanwu La
Vulnerable:	Adobe Acrobat Reader DC 2019.8.20081 Adobe Acrobat Reader DC 2019.8.20080 Adobe Acrobat Reader DC 2019.8.20071 Adobe Acrobat Reader DC 2015.8.20082 Adobe Acrobat Reader DC 2015.6.30457 Adobe Acrobat Reader DC 2015.6.30452 Adobe Acrobat Reader DC 2015.6.30448 Adobe Acrobat Reader DC 2015.6.30434 Adobe Acrobat Reader DC 2015.6.30418 Adobe Acrobat Reader DC 2015.6.30417 Adobe Acrobat Reader DC 2015.6.30416 Adobe Acrobat Reader DC 2015.6.30413 Adobe Acrobat Reader DC 2015.6.30394 Adobe Acrobat Reader DC 2015.6.30392 Adobe Acrobat Reader DC 2015.6.30355 Adobe Acrobat Reader DC 2015.6.30352 Adobe Acrobat Reader DC 2015.6.30306 Adobe Acrobat Reader DC 2015.6.30060 Adobe Acrobat Reader DC 2015.009.20069 Adobe Acrobat Reader DC 2015.007.20033 Adobe Acrobat Reader DC 2015.006.30456 Adobe Acrobat Reader DC 2015.006.30094 Adobe Acrobat Reader DC 2015.006.30033 Adobe Acrobat Reader 2017.11.30106 Adobe Acrobat Reader 2017.11.30105 Adobe Acrobat Reader 2017.11.30096 Adobe Acrobat Reader 2017.11.30080 Adobe Acrobat Reader 2017.11.30079 Adobe Acrobat Reader 2017.11.30078 Adobe Acrobat Reader 2017.11.30070 Adobe Acrobat Reader 2017.11.30068 Adobe Acrobat Reader 2017.11.30066 Adobe Acrobat Reader 2017.11.30059 Adobe Acrobat Reader 2017.8.30051 Adobe Acrobat DC 2019.8.20081 Adobe Acrobat DC 2019.8.20080 Adobe Acrobat DC 2019.8.20071 Adobe Acrobat DC 2015.6.30457 Adobe Acrobat DC 2015.6.30456 Adobe Acrobat DC 2015.6.30452 Adobe Acrobat DC 2015.6.30448 Adobe Acrobat DC 2015.6.30434 Adobe Acrobat DC 2015.6.30418 Adobe Acrobat DC 2015.6.30417 Adobe Acrobat DC 2015.6.30416 Adobe Acrobat DC 2015.6.30413 Adobe Acrobat DC 2015.6.30394 Adobe Acrobat DC 2015.6.30392 Adobe Acrobat DC 2015.6.30355 Adobe Acrobat DC 2015.6.30352 Adobe Acrobat DC 2015.6.30306 Adobe Acrobat DC 2015.009.20069 Adobe Acrobat DC 2015.008.20082 Adobe Acrobat DC 2015.007.20033 Adobe Acrobat DC 2015.006.30094 Adobe Acrobat DC 2015.006.30060 Adobe Acrobat DC 2015.006.30033 Adobe Acrobat 2017.11.30106 Adobe Acrobat 2017.11.30105 Adobe Acrobat 2017.11.30102 Adobe Acrobat 2017.11.30099 Adobe Acrobat 2017.11.30096 Adobe Acrobat 2017.11.30080 Adobe Acrobat 2017.11.30079 Adobe Acrobat 2017.11.30078 Adobe Acrobat 2017.11.30070 Adobe Acrobat 2017.11.30068 Adobe Acrobat 2017.11.30066 Adobe Acrobat 2017.11.30059 Adobe Acrobat 2017.8.30051
Not Vulnerable:

Adobe Acrobat and Reader APSB18-41 Multiple Information Disclosure Vulnerabilities

Adobe Acrobat and Reader are prone to multiple information-disclosure vulnerabilities.

An attacker can exploit these issues to gain access to sensitive information that may aid in further attacks.

These issues are fixed in:

Adobe Acrobat DC version 2019.010.20064
Adobe Acrobat Reader DC version 2019.010.20064
Adobe Acrobat version 2017.011.30110
Adobe Acrobat Reader DC version 2017.011.30110
Adobe Acrobat DC version 2015.006.30461
Adobe Acrobat Reader DC version 2015.006.30461

Adobe Acrobat and Reader APSB18-41 Multiple Information Disclosure Vulnerabilities

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Adobe Acrobat and Reader APSB18-41 Multiple Information Disclosure Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Adobe Acrobat and Reader APSB18-41 Multiple Information Disclosure Vulnerabilities

References:

• Adobe Homepage (Adobe)
  
• APSB18-41: Security Bulletin for Adobe Acrobat and Reader (Adobe)