CVE-2018-4910: High severity adobe acrobat reader vulnerability
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a heap overflow vulnerability in the JavaScript engine. The vulnerability is triggered by a PDF file with crafted JavaScript code that manipulates the optional content group (OCG). A successful attack can lead to code corruption, control-flow hijack, or a code re-use attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-4910?
CVE-2018-4910 has a critical severity rating due to its capability to trigger a heap overflow vulnerability.
How do I fix CVE-2018-4910?
To fix CVE-2018-4910, users should update their Adobe Acrobat or Acrobat Reader to the latest version available.
What products are affected by CVE-2018-4910?
CVE-2018-4910 affects Adobe Acrobat Reader, Adobe Acrobat DC, and their respective versions prior to the specified thresholds.
What type of vulnerability is CVE-2018-4910?
CVE-2018-4910 is classified as a heap overflow vulnerability that can be exploited through specially crafted PDF files.
Can CVE-2018-4910 be exploited remotely?
Yes, CVE-2018-4910 can be exploited remotely by opening a malicious PDF file, potentially allowing execution of arbitrary code.