CVE-2018-5030: Null Pointer Dereference
First published: Fri Jul 20 2018(Updated: )
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Acrobat Reader | >=15.006.30060<=15.006.30418 | |
| Adobe Acrobat Reader | >=15.008.20082<=18.011.20040 | |
| Adobe Acrobat Reader | >=17.011.30059<=17.011.30080 | |
| Adobe Acrobat Reader Notification Manager | >=15.006.30060<=15.006.30418 | |
| Adobe Acrobat Reader Notification Manager | >=15.008.20082<=18.011.20040 | |
| Adobe Acrobat Reader Notification Manager | >=17.011.30059<=17.011.30080 | |
| Apple iOS and macOS | ||
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-5030?
CVE-2018-5030 is rated as critical due to its potential to allow arbitrary code execution.
How do I fix CVE-2018-5030?
To fix CVE-2018-5030, update Adobe Acrobat and Reader to the latest versions provided by Adobe.
Which versions are affected by CVE-2018-5030?
CVE-2018-5030 affects Adobe Acrobat and Reader versions prior to 2018.011.20040, 2017.011.30080, and 2015.006.30418.
What kind of vulnerability is CVE-2018-5030?
CVE-2018-5030 is an Untrusted pointer dereference vulnerability.
Can CVE-2018-5030 be exploited remotely?
CVE-2018-5030 requires user interaction for exploitation, as it involves the opening of malicious files.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/references
- agent/weakness
- agent/severity
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/softwarecombine
- vendor/adobe
- canonical/adobe acrobat reader
- version/adobe acrobat reader/15.006.30060
- version/adobe acrobat reader/15.006.30418
- version/adobe acrobat reader/15.008.20082
- version/adobe acrobat reader/18.011.20040
- version/adobe acrobat reader/17.011.30059
- version/adobe acrobat reader/17.011.30080
- canonical/adobe acrobat reader notification manager
- version/adobe acrobat reader notification manager/15.006.30060
- version/adobe acrobat reader notification manager/15.006.30418
- version/adobe acrobat reader notification manager/15.008.20082
- version/adobe acrobat reader notification manager/18.011.20040
- version/adobe acrobat reader notification manager/17.011.30059
- version/adobe acrobat reader notification manager/17.011.30080
- vendor/apple
- canonical/apple ios and macos
- vendor/microsoft
- canonical/microsoft windows