CVE-2018-4890: High severity adobe acrobat reader vulnerability
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a heap overflow vulnerability in the image conversion engine, when handling JPEG data embedded within an XPS file. A successful attack can lead to code corruption, control-flow hijack, or an information leak attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-4890?
CVE-2018-4890 is rated as critical due to its potential for remote code execution through a heap overflow vulnerability.
How do I fix CVE-2018-4890?
The best way to fix CVE-2018-4890 is to upgrade your Adobe Acrobat Reader or Adobe Acrobat DC to the latest version that has addressed this vulnerability.
What versions are affected by CVE-2018-4890?
CVE-2018-4890 affects Adobe Acrobat Reader versions 2018.009.20050 and earlier, Acrobat DC 2017.011.30070 and earlier, and Acrobat DC 2015.006.30394 and earlier.
What are the potential impacts of CVE-2018-4890?
Exploitation of CVE-2018-4890 could allow an attacker to execute arbitrary code on a victim's system by tricking them into opening a malicious JPEG file.
Is there a patch available for CVE-2018-4890?
Yes, Adobe has released patches for CVE-2018-4890 as part of their security updates for affected products.