CVE-2018-4998: Buffer Overflow

Q: What is the severity of CVE-2018-4998?

CVE-2018-4998 has been assigned a high severity rating due to the potential for arbitrary code execution.

Q: How do I fix CVE-2018-4998?

To fix CVE-2018-4998, update Adobe Acrobat or Reader to the latest version, specifically 2018.009.20051 or later.

Q: What products are affected by CVE-2018-4998?

CVE-2018-4998 affects Adobe Acrobat and Reader versions up to 2018.009.20050, 2017.011.30070, and 2015.006.30394.

Q: What can happen if CVE-2018-4998 is exploited?

Exploitation of CVE-2018-4998 may allow attackers to execute arbitrary code in the context of the current user.

Q: Is there a workaround for CVE-2018-4998?

There are no confirmed workarounds for CVE-2018-4998; updating the software is the recommended approach.

Published Jul 9, 2018

Updated

Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier have a Memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Affected Software

8 affected components

Adobe Acrobat>=17.011.30059<=17.011.30070

Adobe Acrobat DC>=15.006.30060<=15.006.30394

Adobe Acrobat DC>=15.008.20082<=18.009.20050

Adobe Acrobat Reader>=17.011.30059<=17.011.30070

Adobe Acrobat Reader DC>=15.006.30060<=15.006.30394

Adobe Acrobat Reader DC>=15.008.20082<=18.009.20050

Apple iOS and macOS

Microsoft Windows

Remediation

Patch Available

https://helpx.adobe.com/security/products/acrobat/apsb18-02.html

Event History

Jul 9, 2018

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-4998?

CVE-2018-4998 has been assigned a high severity rating due to the potential for arbitrary code execution.

How do I fix CVE-2018-4998?