First published: Mon Jul 09 2018(Updated: )
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Acrobat | >=15.006.30417<15.006.30418 | |
Adobe Acrobat | >=17.011.30079<17.011.30080 | |
Adobe Acrobat | >=18.011.20038<18.011.20040 | |
Adobe Acrobat Reader | >=15.006.30417<15.006.30418 | |
Adobe Acrobat Reader | >=17.011.30079<17.011.30080 | |
Adobe Acrobat Reader | >=18.011.20038<18.011.20040 | |
Apple iOS and macOS | ||
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-4956 has a severity rating of important, indicating a significant risk of information disclosure.
To mitigate CVE-2018-4956, update Adobe Acrobat and Reader to the latest version available.
CVE-2018-4956 affects Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier.
CVE-2018-4956 is categorized as an Out-of-bounds read vulnerability that could lead to information disclosure.
Yes, using an older version of Adobe Acrobat makes systems more susceptible to the risks associated with CVE-2018-4956.