Description Preview
The vulnerability is a Use-after-free issue in Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier. This type of vulnerability occurs when a program continues to use a pointer after it has been freed. This can lead to a variety of impacts, including causing a program to crash, using arbitrary code, or even enabling an attack to execute arbitrary code in the context of the current user.
Overview
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier are affected by a Use-after-free vulnerability. This vulnerability could allow an attacker to execute arbitrary code in the context of the current user. The vulnerability was made public on July 9, 2018.
Remediation
Users of affected versions should update to the latest version of Adobe Acrobat and Reader as soon as possible to mitigate the risk of exploitation. Adobe has likely released patches to address this vulnerability.
References
- http://www.securityfocus.com/bid/104169
- https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
- http://www.securitytracker.com/id/1040920
Industry ExposureMost to leastThis section illustrates the prevalence of a specific Common Vulnerabilities and Exposures (CVE) across various industries based on customer reports. The ranking displays industries from the most to least affected by this particular vulnerability, offering valuable insight into where this CVE has been most frequently observed. This information can help organizations within these sectors prioritize their security efforts, understand their relative risk exposure compared to their peers, and focus remediation strategies where they are most needed. By understanding the industry-specific impact, organizations can make more informed decisions regarding patching, resource allocation, and overall risk management related to this CVE.
This section illustrates the prevalence of a specific Common Vulnerabilities and Exposures (CVE) across various industries based on customer reports. The ranking displays industries from the most to least affected by this particular vulnerability, offering valuable insight into where this CVE has been most frequently observed. This information can help organizations within these sectors prioritize their security efforts, understand their relative risk exposure compared to their peers, and focus remediation strategies where they are most needed. By understanding the industry-specific impact, organizations can make more informed decisions regarding patching, resource allocation, and overall risk management related to this CVE.
- ManufacturingManufacturing
- Health Care & Social AssistanceHealth Care & Social Assistance
- Public AdministrationPublic Administration
- Transportation & WarehousingTransportation & Warehousing
- Educational ServicesEducational Services
- Retail TradeRetail Trade
- Finance and InsuranceFinance and Insurance
- Arts, Entertainment & RecreationArts, Entertainment & Recreation
- Other Services (except Public Administration)Other Services (except Public Administration)
- Professional, Scientific, & Technical ServicesProfessional, Scientific, & Technical Services
- UtilitiesUtilities
- Management of Companies & EnterprisesManagement of Companies & Enterprises
- InformationInformation
- Agriculture, Forestry Fishing & HuntingAgriculture, Forestry Fishing & Hunting
- Real Estate Rental & LeasingReal Estate Rental & Leasing
- Accommodation & Food ServicesAccommodation & Food Services
- ConstructionConstruction
- Wholesale TradeWholesale Trade
- Administrative, Support, Waste Management & Remediation ServicesAdministrative, Support, Waste Management & Remediation Services
- MiningMining
