CVE-2019-7834: Use After Free

Q: What is the severity of CVE-2019-7834?

CVE-2019-7834 is classified as a critical vulnerability due to its potential for arbitrary code execution.

Q: How do I fix CVE-2019-7834?

To mitigate CVE-2019-7834, update Adobe Acrobat or Reader to the latest versions provided by Adobe.

Q: What versions are affected by CVE-2019-7834?

CVE-2019-7834 affects Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2017.011.30140 and earlier, and 2015.006.30495 and earlier.

Q: Can CVE-2019-7834 lead to data loss?

Exploiting CVE-2019-7834 could potentially allow attackers to execute arbitrary code, which may result in data loss.

Q: Is it safe to use Adobe Acrobat after the CVE-2019-7834 disclosure?

Using Adobe Acrobat is safe as long as the software is updated to a version that has patched CVE-2019-7834.

Published May 22, 2019

Updated

Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

Affected Software

8 affected components

Adobe Acrobat DC>=15.006.30060<=15.006.30495

Adobe Acrobat DC>=15.008.20082<=19.010.20100

Adobe Acrobat DC>=17.011.30056<=17.011.30140

Adobe Acrobat Reader DC>=15.006.30060<=15.006.30493

Adobe Acrobat Reader DC>=15.008.20082<=19.010.20099

Adobe Acrobat Reader DC>=17.011.30059<=17.011.30138

Apple iOS and macOS

Microsoft Windows

Remediation

Patch Available

https://helpx.adobe.com/security/products/acrobat/apsb19-18.html

Event History

May 22, 2019

CVE Published

via MITRE·06:01 PM

Data Sourced

via MITRE·06:01 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-7834?

CVE-2019-7834 is classified as a critical vulnerability due to its potential for arbitrary code execution.

How do I fix CVE-2019-7834?