CVE-2019-8205: Buffer Overflow
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution .
Affected Software
Remediation
Event History
Frequently Asked Questions
Which deployments are affected?
Adobe Acrobat and Reader releases in the listed version families are affected through 2019.012.20040, 2017.011.30148, and 2015.006.30503. The affected software identified is Adobe Acrobat DC and Adobe Acrobat Reader DC.
Does exploitation require authentication or user interaction?
No. The CVSS vector indicates network attack access with low complexity, no privileges required, and no user interaction required.
What is the impact of successful exploitation?
Successful exploitation could result in arbitrary code execution. The CVSS metrics indicate high impact to confidentiality, integrity, and availability.
What should teams do to remediate this issue?
Apply the available patch. The provided data does not identify an alternative mitigation for systems that cannot be patched immediately.