high
8.8
CWE
416
Advisory Published
Updated
Advisory Published

CVE-2018-4913: Adobe Acrobat Pro DC XFA picture Use-After-Free Remote Code Execution Vulnerability

First published: Tue Feb 27 2018(Updated: )

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the XFA engine, related to DOM manipulation. The vulnerability is triggered by crafted XFA script definitions in a PDF file. Successful exploitation could lead to arbitrary code execution.

Credit: psirt@adobe.com

Affected SoftwareAffected VersionHow to fix
Adobe Acrobat
Adobe Acrobat Reader>=17.0<=17.011.30070
Adobe Acrobat Reader DC>=-<=18.009.20050
Adobe Acrobat Reader DC>=15.0<=15.006.30394
Adobe Acrobat Reader Notification Manager>=17.0<=17.011.30070
Adobe Acrobat Reader>=-<=18.009.20050
Adobe Acrobat Reader>=15.0<=15.006.30394

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2018-4913?

    CVE-2018-4913 has a severity rating of critical due to its use after free vulnerability which could lead to remote code execution.

  • How do I fix CVE-2018-4913?

    To fix CVE-2018-4913, users should update Adobe Acrobat Reader and Acrobat DC to the latest versions as provided by Adobe.

  • What systems are affected by CVE-2018-4913?

    CVE-2018-4913 affects Adobe Acrobat Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier.

  • Can CVE-2018-4913 be exploited remotely?

    Yes, CVE-2018-4913 can potentially be exploited remotely through maliciously crafted PDF documents.

  • What are the symptoms of CVE-2018-4913 exploitation?

    Exploitation of CVE-2018-4913 may lead to unexpected application crashes or allow attackers to execute arbitrary code on the affected system.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203