CVE-2018-4917
First published: Sat May 19 2018(Updated: )
Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, 2015.006.30394 and earlier have an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Acrobat 2017 | >=17.011.30070<17.011.30078 | |
| Adobe Acrobat Dc | >=15.006.30394<15.006.30413 | |
| Adobe Acrobat Dc | >=18.009.20050<18.011.20035 | |
| Adobe Acrobat Reader 2017 | >=17.011.30070<17.011.30078 | |
| Adobe Acrobat Reader DC | >=15.006.30394<15.006.30413 | |
| Adobe Acrobat Reader DC | >=18.009.20050<18.011.20035 | |
| Apple macOS | ||
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Adobe Acrobat and Reader vulnerability?
The vulnerability ID for this Adobe Acrobat and Reader vulnerability is CVE-2018-4917.
What is the severity of CVE-2018-4917 vulnerability?
The severity of CVE-2018-4917 vulnerability is critical with a CVSS score of 9.8.
How can the CVE-2018-4917 vulnerability be exploited?
The CVE-2018-4917 vulnerability can be exploited through an exploitable heap overflow, which could lead to arbitrary code execution.
Which versions of Adobe Acrobat and Reader are affected by CVE-2018-4917 vulnerability?
Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier are affected by CVE-2018-4917 vulnerability.
How can I fix the CVE-2018-4917 vulnerability?
To fix the CVE-2018-4917 vulnerability, it is recommended to update Adobe Acrobat and Reader to the latest version.
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/description
- agent/event
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/adobe
- canonical/adobe acrobat 2017
- version/adobe acrobat 2017/17.011.30070
- canonical/adobe acrobat dc
- version/adobe acrobat dc/15.006.30394
- version/adobe acrobat dc/18.009.20050
- canonical/adobe acrobat reader 2017
- version/adobe acrobat reader 2017/17.011.30070
- canonical/adobe acrobat reader dc
- version/adobe acrobat reader dc/15.006.30394
- version/adobe acrobat reader dc/18.009.20050
- vendor/apple
- canonical/apple macos
- vendor/microsoft
- canonical/microsoft windows