CVE-2019-8060: Command Injection

Q: What is the severity of CVE-2019-8060?

CVE-2019-8060 is considered critical due to its potential for remote code execution.

Q: How do I fix CVE-2019-8060?

To mitigate the impact of CVE-2019-8060, update Adobe Acrobat and Reader to the latest version.

Q: Which versions are affected by CVE-2019-8060?

CVE-2019-8060 affects Adobe Acrobat and Reader versions 2019.012.20035 and earlier, as well as older versions through 2015.006.30498.

Q: What type of vulnerability is CVE-2019-8060?

CVE-2019-8060 is a command injection vulnerability that allows an attacker to execute arbitrary code.

Q: Can CVE-2019-8060 affect both Windows and macOS?

CVE-2019-8060 specifically targets Adobe software and does not affect the underlying operating systems like Windows or macOS directly.

Published Aug 20, 2019

Updated

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution .

Affected Software

8 affected components

Adobe Acrobat DC>=15.006.30060<15.006.30499

Adobe Acrobat DC>=15.008.20082<19.012.20036

Adobe Acrobat DC>=17.011.30059<17.011.30144

Adobe Acrobat Reader DC>=15.006.30060<15.006.30499

Adobe Acrobat Reader DC>=15.008.20082<19.012.20036

Adobe Acrobat Reader DC>=17.011.30059<17.011.30144

Apple macOS

Microsoft Windows

Remediation

Patch Available

https://helpx.adobe.com/security/products/acrobat/apsb19-41.html

Event History

Aug 20, 2019

CVE Published

via MITRE·08:07 PM

Data Sourced

via MITRE·08:07 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-8060?

CVE-2019-8060 is considered critical due to its potential for remote code execution.

How do I fix CVE-2019-8060?