CVE-2018-4984: Critical severity adobe acrobat reader dc vulnerability

Q: What is the severity of CVE-2018-4984?

CVE-2018-4984 is considered a high severity vulnerability due to its potential for arbitrary code execution.

Q: How do I fix CVE-2018-4984?

To address CVE-2018-4984, users should update to the latest version of Adobe Acrobat or Reader that is not affected by this vulnerability.

Q: What versions of Adobe products are affected by CVE-2018-4984?

CVE-2018-4984 impacts Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier.

Q: What type of vulnerability is CVE-2018-4984?

CVE-2018-4984 is a heap overflow vulnerability that can be exploited for executing arbitrary code.

Q: Can CVE-2018-4984 be exploited remotely?

Exploitation of CVE-2018-4984 requires that the attacker trick the user into opening a malicious file, indicating a remote attack vector is possible.

Published Jul 9, 2018

Updated

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Heap Overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Affected Software

8 affected components

Adobe Acrobat DC>=15.006.30417<15.006.30418

Adobe Acrobat DC>=17.011.30079<17.011.30080

Adobe Acrobat DC>=18.011.20038<18.011.20040

Adobe Acrobat Reader DC>=15.006.30417<15.006.30418

Adobe Acrobat Reader DC>=17.011.30079<17.011.30080

Adobe Acrobat Reader DC>=18.011.20038<18.011.20040

Apple iOS and macOS

Microsoft Windows

Remediation

Patch Available

https://helpx.adobe.com/security/products/acrobat/apsb18-09.html

Event History

Jul 9, 2018

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-4984?

CVE-2018-4984 is considered a high severity vulnerability due to its potential for arbitrary code execution.

How do I fix CVE-2018-4984?