CVE-2018-4963: High severity adobe acrobat reader dc vulnerability

Q: What is the severity of CVE-2018-4963?

CVE-2018-4963 has a medium severity rating due to the potential for information disclosure upon successful exploitation.

Q: How do I fix CVE-2018-4963?

To fix CVE-2018-4963, users should update their Adobe Acrobat and Reader to the latest versions that have addressed this vulnerability.

Q: Which versions are affected by CVE-2018-4963?

CVE-2018-4963 affects Adobe Acrobat and Reader versions 2015.006.30417 and earlier, 2017.011.30079 and earlier, and 2018.011.20038 and earlier.

Q: What type of vulnerability is CVE-2018-4963?

CVE-2018-4963 is classified as an out-of-bounds read vulnerability that may lead to information disclosure.

Q: Can CVE-2018-4963 be exploited remotely?

Yes, CVE-2018-4963 can be exploited remotely if the attacker can deliver a malicious PDF file to the target.

Published Jul 9, 2018

Updated

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

Affected Software

8 affected components

Adobe Acrobat DC>=15.006.30060<=15.006.30417

Adobe Acrobat DC>=15.008.20082<=18.011.20038

Adobe Acrobat DC>=17.011.30059<=17.011.30079

Adobe Acrobat Reader DC>=15.006.30060<=15.006.30417

Adobe Acrobat Reader DC>=15.008.20082<=18.011.20038

Adobe Acrobat Reader DC>=17.011.30059<=17.011.30079

Apple iOS and macOS

Microsoft Windows

Remediation

Patch Available

https://helpx.adobe.com/security/products/acrobat/apsb18-09.html

Event History

Jul 9, 2018

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-4963?

CVE-2018-4963 has a medium severity rating due to the potential for information disclosure upon successful exploitation.

How do I fix CVE-2018-4963?