CVE-2019-7112: Use After Free

Q: What is the severity of CVE-2019-7112?

CVE-2019-7112 is rated as critical due to its potential for arbitrary code execution.

Q: How do I fix CVE-2019-7112?

To fix CVE-2019-7112, update Adobe Acrobat or Reader to the latest version provided by Adobe.

Q: What products are affected by CVE-2019-7112?

CVE-2019-7112 affects Adobe Acrobat DC and Adobe Acrobat Reader DC versions prior to the specified security updates.

Q: What could happen if CVE-2019-7112 is exploited?

If exploited, CVE-2019-7112 could allow an attacker to execute arbitrary code on the affected machine.

Q: Is CVE-2019-7112 a common vulnerability?

While CVE-2019-7112 is not uncommon, its severity makes it a major concern for users of Adobe Acrobat and Reader.

Published May 23, 2019

Updated

Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Affected Software

8 affected components

Adobe Acrobat DC>=15.006.30060<=15.006.30482

Adobe Acrobat DC>=15.008.20082<=19.010.20098

Adobe Acrobat DC>=17.011.30056<=17.011.30127

Adobe Acrobat Reader DC>=15.006.30060<=15.006.30482

Adobe Acrobat Reader DC>=15.008.20082<=19.010.20098

Adobe Acrobat Reader DC>=17.011.30059<=17.011.30127

Apple iOS and macOS

Microsoft Windows

Remediation

Patch Available

https://helpx.adobe.com/security/products/acrobat/apsb19-17.html

Event History

May 23, 2019

CVE Published

via MITRE·04:55 PM

Data Sourced

via MITRE·04:55 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-7112?

CVE-2019-7112 is rated as critical due to its potential for arbitrary code execution.

How do I fix CVE-2019-7112?