Adobe Acrobat and Reader Use After Free Multiple Arbitrary Code Execution Vulnerabilities

Bugtraq ID:	108320
Class:	Boundary Condition Error
CVE:	CVE-2019-7835 CVE-2019-7832 CVE-2019-7833 CVE-2019-7831 CVE-2019-7830 CVE-2019-7823 CVE-2019-7821 CVE-2019-7817 CVE-2019-7814 CVE-2019-7809 CVE-2019-7808 CVE-2019-7807 CVE-2019-7806 CVE-2019-7805 CVE-2019-7797 CVE-2019-7796 CVE-2019-7792 CVE-2019-7791 CVE-2019-7788 CVE-2019-7786 CVE-2019-7785 CVE-2019-7783 CVE-2019-7782 CVE-2019-7781 CVE-2019-7772 CVE-2019-7768 CVE-2019-7767 CVE-2019-7766 CVE-2019-7765 CVE-2019-7764 CVE-2019-7763 CVE-2019-7762 CVE-2019-7761 CVE-2019-7760 CVE-2019-7759
Remote:	Yes
Local:	No
Published:	May 14 2019 12:00AM
Updated:	May 14 2019 12:00AM
Credit:	Zhibin Zhang, Qi Deng, Hui Gao, Zhaoyan Xu, Zhanglin He, Taojie Wang, Gal De Leon of Palo Alto Networks, Aleksandar Nikolic of Cisco Talos, Xu Peng and Su Purui from TCA/SKLCS Institute of Software, Peternguyen, hemidallt, T3rmin4t0r, Steven Seeley working
Vulnerable:	Adobe Acrobat Reader DC 2019.10.20100 Adobe Acrobat Reader DC 2019.10.20099 Adobe Acrobat Reader DC 2019.10.20098 Adobe Acrobat Reader DC 2019.10.20091 Adobe Acrobat Reader DC 2019.10.20069 Adobe Acrobat Reader DC 2019.10.20064 Adobe Acrobat Reader DC 2019.8.20081 Adobe Acrobat Reader DC 2019.8.20080 Adobe Acrobat Reader DC 2019.8.20071 Adobe Acrobat Reader DC 2015.8.20082 Adobe Acrobat Reader DC 2015.6.30493 Adobe Acrobat Reader DC 2015.6.30482 Adobe Acrobat Reader DC 2015.6.30475 Adobe Acrobat Reader DC 2015.6.30464 Adobe Acrobat Reader DC 2015.6.30461 Adobe Acrobat Reader DC 2015.6.30461 Adobe Acrobat Reader DC 2015.6.30457 Adobe Acrobat Reader DC 2015.6.30452 Adobe Acrobat Reader DC 2015.6.30448 Adobe Acrobat Reader DC 2015.6.30434 Adobe Acrobat Reader DC 2015.6.30418 Adobe Acrobat Reader DC 2015.6.30417 Adobe Acrobat Reader DC 2015.6.30416 Adobe Acrobat Reader DC 2015.6.30413 Adobe Acrobat Reader DC 2015.6.30394 Adobe Acrobat Reader DC 2015.6.30392 Adobe Acrobat Reader DC 2015.6.30355 Adobe Acrobat Reader DC 2015.6.30352 Adobe Acrobat Reader DC 2015.6.30306 Adobe Acrobat Reader DC 2015.6.30060 Adobe Acrobat Reader DC 2015.009.20069 Adobe Acrobat Reader DC 2015.007.20033 Adobe Acrobat Reader DC 2015.006.30456 Adobe Acrobat Reader DC 2015.006.30094 Adobe Acrobat Reader DC 2015.006.30033 Adobe Acrobat Reader 2017.11.30138 Adobe Acrobat Reader 2017.11.30113 Adobe Acrobat Reader 2017.11.30110 Adobe Acrobat Reader 2017.11.30106 Adobe Acrobat Reader 2017.11.30105 Adobe Acrobat Reader 2017.11.30096 Adobe Acrobat Reader 2017.11.30080 Adobe Acrobat Reader 2017.11.30079 Adobe Acrobat Reader 2017.11.30078 Adobe Acrobat Reader 2017.11.30070 Adobe Acrobat Reader 2017.11.30068 Adobe Acrobat Reader 2017.11.30066 Adobe Acrobat Reader 2017.11.30059 Adobe Acrobat Reader 2017.8.30051 Adobe Acrobat DC 2019.10.20100 Adobe Acrobat DC 2019.10.20099 Adobe Acrobat DC 2019.10.20098 Adobe Acrobat DC 2019.10.20091 Adobe Acrobat DC 2019.10.20069 Adobe Acrobat DC 2019.10.20064 Adobe Acrobat DC 2019.8.20081 Adobe Acrobat DC 2019.8.20080 Adobe Acrobat DC 2019.8.20071 Adobe Acrobat DC 2015.6.30495 Adobe Acrobat DC 2015.6.30493 Adobe Acrobat DC 2015.6.30482 Adobe Acrobat DC 2015.6.30475 Adobe Acrobat DC 2015.6.30464 Adobe Acrobat DC 2015.6.30461 Adobe Acrobat DC 2015.6.30461 Adobe Acrobat DC 2015.6.30457 Adobe Acrobat DC 2015.6.30456 Adobe Acrobat DC 2015.6.30452 Adobe Acrobat DC 2015.6.30448 Adobe Acrobat DC 2015.6.30434 Adobe Acrobat DC 2015.6.30418 Adobe Acrobat DC 2015.6.30417 Adobe Acrobat DC 2015.6.30416 Adobe Acrobat DC 2015.6.30413 Adobe Acrobat DC 2015.6.30394 Adobe Acrobat DC 2015.6.30392 Adobe Acrobat DC 2015.6.30355 Adobe Acrobat DC 2015.6.30352 Adobe Acrobat DC 2015.6.30306 Adobe Acrobat DC 2015.009.20069 Adobe Acrobat DC 2015.008.20082 Adobe Acrobat DC 2015.007.20033 Adobe Acrobat DC 2015.006.30094 Adobe Acrobat DC 2015.006.30060 Adobe Acrobat DC 2015.006.30033 Adobe Acrobat 2017.11.30140 Adobe Acrobat 2017.11.30138 Adobe Acrobat 2017.11.30127 Adobe Acrobat 2017.11.30120 Adobe Acrobat 2017.11.30113 Adobe Acrobat 2017.11.30110 Adobe Acrobat 2017.11.30106 Adobe Acrobat 2017.11.30105 Adobe Acrobat 2017.11.30102 Adobe Acrobat 2017.11.30099 Adobe Acrobat 2017.11.30096 Adobe Acrobat 2017.11.30080 Adobe Acrobat 2017.11.30079 Adobe Acrobat 2017.11.30078 Adobe Acrobat 2017.11.30070 Adobe Acrobat 2017.11.30068 Adobe Acrobat 2017.11.30066 Adobe Acrobat 2017.11.30059 Adobe Acrobat 2017.8.30051
Not Vulnerable:	Adobe Acrobat Reader DC 2019.12.20034 Adobe Acrobat Reader DC 2017.11.30142 Adobe Acrobat Reader DC 2015.6.30497 Adobe Acrobat DC 2019.12.20034 Adobe Acrobat DC 2015.6.30497 Adobe Acrobat 2017.11.30142

Adobe Acrobat and Reader Use After Free Multiple Arbitrary Code Execution Vulnerabilities

Adobe Acrobat and Reader are prone to multiple arbitrary code-execution vulnerabilities .

Successfully exploiting these issues allow attackers to execute arbitrary code in the context of current user running the affected application. Failed exploits will result in denial-of-service conditions.

Adobe Acrobat and Reader Use After Free Multiple Arbitrary Code Execution Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Adobe Acrobat and Reader Use After Free Multiple Arbitrary Code Execution Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Adobe Acrobat and Reader Use After Free Multiple Arbitrary Code Execution Vulnerabilities

References:

• Adobe Homepage (Adobe)
  
• Security bulletin for Adobe Acrobat and Reader | APSB19-18 (Adobe)