CVE-2018-4987
CRITICALAdobe Acrobat DC < 15.006.30417, 15.008.20082-18.011.20038 - Untrusted Pointer Dereference
Title source: llmDescription
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/104173
Patch, Vendor Advisory x_refsource_misc
https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1040920
Scores
CVSS v3
9.8
EPSS
0.1390
EPSS Percentile
96.1%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-476
Status
published
Products (4)
adobe/acrobat_dc
15.006.30060 - 15.006.30417
adobe/acrobat_dc
15.008.20082 - 18.011.20038
adobe/acrobat_reader_dc
15.006.30060 - 15.006.30417
adobe/acrobat_reader_dc
15.008.20082 - 18.011.20038
Published
Jul 09, 2018
Tracked Since
Feb 18, 2026