CVE-2018-15979: Infoleak
Published Nov 29, 2018
·Updated
Adobe Acrobat and Reader versions 2019.008.20080 and earlier, 2017.011.30105 and earlier, and 2015.006.30456 and earlier have a ntlm sso hash theft vulnerability. Successful exploitation could lead to information disclosure.
Affected Software
7 affected components
Adobe Acrobat DC>=15.006.30060<=15.006.30456
Adobe Acrobat DC>=15.008.20082<=19.008.20080
Adobe Acrobat DC>=17.011.30059<=17.011.30105
Adobe Acrobat Reader DC>=15.006.30060<=15.006.30456
Adobe Acrobat Reader DC>=15.008.20082<=19.008.20080
Adobe Acrobat Reader DC>=17.011.30059<=17.011.30105
Microsoft Windows
Remediation
Event History
Nov 29, 2018
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-15979?
CVE-2018-15979 is classified as a critical information disclosure vulnerability.
2
How do I fix CVE-2018-15979?
To remediate CVE-2018-15979, update Adobe Acrobat and Reader to the latest version available.
3
What versions are affected by CVE-2018-15979?
CVE-2018-15979 affects Adobe Acrobat and Reader versions 2019.008.20080 and earlier, 2017.011.30105 and earlier, and 2015.006.30456 and earlier.
4
What types of information can be disclosed due to CVE-2018-15979?
Successful exploitation of CVE-2018-15979 could lead to the theft of NTLM SSO hashes.
5
Is CVE-2018-15979 present in Microsoft Windows?
CVE-2018-15979 does not affect Microsoft Windows, as it is specific to Adobe Acrobat and Reader.