CVE-2018-4909: Medium severity adobe acrobat reader vulnerability
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of the image conversion module when processing metadata in JPEG images. A successful attack can lead to sensitive data exposure.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-4909?
CVE-2018-4909 is classified as a critical vulnerability due to its potential impact on Adobe Acrobat Reader and Adobe Acrobat DC.
How do I fix CVE-2018-4909?
To mitigate CVE-2018-4909, update Adobe Acrobat Reader and Acrobat DC to the latest version as recommended by Adobe.
Which versions are affected by CVE-2018-4909?
CVE-2018-4909 affects Adobe Acrobat Reader 2018.009.20050 and earlier, as well as multiple earlier versions of Adobe Acrobat DC.
What type of vulnerability is CVE-2018-4909?
CVE-2018-4909 is a memory corruption vulnerability that can lead to reading data beyond the intended buffer limits.
Can CVE-2018-4909 be exploited remotely?
Yes, CVE-2018-4909 can be exploited remotely through malicious PDF files that trigger the buffer overflow.