CVE-2019-8208: Use After Free

Q: What is the severity of CVE-2019-8208?

CVE-2019-8208 is classified as a critical severity vulnerability due to its potential to allow arbitrary code execution.

Q: How do I fix CVE-2019-8208?

To fix CVE-2019-8208, users should update Adobe Acrobat and Reader to the latest versions provided by Adobe.

Q: What versions of Acrobat are affected by CVE-2019-8208?

CVE-2019-8208 affects Adobe Acrobat and Reader versions 2019.012.20040 and earlier, 2017.011.30148 and earlier, and 2015.006.30503 and earlier.

Q: What type of vulnerability is CVE-2019-8208?

CVE-2019-8208 is a use-after-free vulnerability that could be exploited to execute arbitrary code.

Q: Can I verify if my Adobe product is vulnerable to CVE-2019-8208?

You can verify vulnerability by checking your Adobe Acrobat and Reader version against the specific versions listed in the CVE-2019-8208 report.

Published Oct 17, 2019

Updated

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Affected Software

8 affected components

Adobe Acrobat DC>=15.006.30060<15.006.30504

Adobe Acrobat DC>=15.008.20082<19.021.20047

Adobe Acrobat DC>=17.011.30059<17.011.30150

Adobe Acrobat Reader DC>=15.006.30060<15.006.30504

Adobe Acrobat Reader DC>=15.008.20082<19.021.20047

Adobe Acrobat Reader DC>=17.011.30059<17.011.30150

Apple macOS

Microsoft Windows

Remediation

Patch Available

https://helpx.adobe.com/security/products/acrobat/apsb19-49.html

Event History

Oct 17, 2019

CVE Published

via MITRE·08:24 PM

Data Sourced

via MITRE·08:24 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-8208?

CVE-2019-8208 is classified as a critical severity vulnerability due to its potential to allow arbitrary code execution.

How do I fix CVE-2019-8208?