CVE-2018-4948: Critical severity adobe acrobat reader dc vulnerability

Q: What is the severity of CVE-2018-4948?

CVE-2018-4948 has a high severity rating due to its potential for arbitrary code execution.

Q: How do I fix CVE-2018-4948?

To fix CVE-2018-4948, upgrade Adobe Acrobat and Reader to the latest versions provided by Adobe.

Q: What does CVE-2018-4948 affect?

CVE-2018-4948 affects Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier.

Q: What could happen if CVE-2018-4948 is exploited?

If exploited successfully, CVE-2018-4948 could lead to arbitrary code execution in the context of the current user.

Q: Which platforms are affected by CVE-2018-4948?

CVE-2018-4948 affects Adobe Acrobat and Reader on various platforms, including Windows and macOS.

Published Jul 9, 2018

Updated

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Heap Overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Affected Software

8 affected components

Adobe Acrobat DC>=15.006.30417<15.006.30418

Adobe Acrobat DC>=17.011.30079<17.011.30080

Adobe Acrobat DC>=18.011.20038<18.011.20040

Adobe Acrobat Reader DC>=15.006.30417<15.006.30418

Adobe Acrobat Reader DC>=17.011.30079<17.011.30080

Adobe Acrobat Reader DC>=18.011.20038<18.011.20040

Apple iOS and macOS

Microsoft Windows

Remediation

Patch Available

https://helpx.adobe.com/security/products/acrobat/apsb18-09.html

Event History

Jul 9, 2018

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-4948?

CVE-2018-4948 has a high severity rating due to its potential for arbitrary code execution.

How do I fix CVE-2018-4948?