First published: Fri May 24 2019(Updated: )
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution .
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Acrobat Reader DC | >=15.006.30060<=15.006.30464 | |
Adobe Acrobat Reader DC | >=15.008.20082<=19.010.20069 | |
Adobe Acrobat Reader DC | >=17.011.30059<=17.011.30113 | |
Adobe Acrobat Reader | >=15.006.30060<=15.006.30464 | |
Adobe Acrobat Reader | >=15.008.20082<=19.010.20069 | |
Adobe Acrobat Reader | >=17.011.30059<=17.011.30113 | |
macOS | ||
Microsoft Windows Operating System |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-7042 has been classified as a critical vulnerability due to its potential for arbitrary code execution.
To fix CVE-2019-7042, users should update to the latest version of Adobe Acrobat or Reader.
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2017.011.30113 and earlier, and 2015.006.30464 and earlier are affected by CVE-2019-7042.
CVE-2019-7042 can facilitate attacks that lead to arbitrary code execution on the affected systems.
There is no official workaround for CVE-2019-7042, and users are advised to upgrade their software to mitigate the risk.