CVE-2019-7117: Critical severity Adobe Acrobat DC vulnerability

Q: What is the severity of CVE-2019-7117?

CVE-2019-7117 has a high severity rating due to its potential for arbitrary code execution.

Q: How do I fix CVE-2019-7117?

To mitigate CVE-2019-7117, update Adobe Acrobat and Reader to the latest version immediately.

Q: Which versions of Adobe Acrobat and Reader are affected by CVE-2019-7117?

CVE-2019-7117 affects Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2017.011.30127 and earlier, and 2015.006.30482 and earlier.

Q: What can be compromised if CVE-2019-7117 is exploited?

Exploiting CVE-2019-7117 could allow an attacker to execute arbitrary code on the affected systems.

Q: Is there a workaround for CVE-2019-7117?

There are no official workarounds for CVE-2019-7117; updating the software is the recommended action.

Published May 23, 2019

Updated

Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .

Affected Software

8 affected components

Adobe Acrobat DC>=15.006.30060<15.006.30493

Adobe Acrobat DC>=15.008.20082<19.010.20099

Adobe Acrobat DC>=17.011.30056<17.011.30138

Adobe Acrobat Reader DC>=15.006.30060<15.006.30493

Adobe Acrobat Reader DC>=15.008.20082<19.010.20099

Adobe Acrobat Reader DC>=17.011.30059<17.011.30138

Apple iOS and macOS

Microsoft Windows

Remediation

Patch Available

https://helpx.adobe.com/security/products/acrobat/apsb19-17.html

Event History

May 23, 2019

CVE Published

via MITRE·05:06 PM

Data Sourced

via MITRE·05:06 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-7117?

CVE-2019-7117 has a high severity rating due to its potential for arbitrary code execution.

How do I fix CVE-2019-7117?