critical9.8Public exploit code
CVE-2019-8195
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Adobe Acrobat Reader DC for Windows - Use of Uninitialized Pointer due to Malformed JBIG2Globals Stream2019-11-11 · dos · windows · Verified
Impact
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution .
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Acrobat Dc | from 15.006.30060 before 15.006.30504 from 15.008.20082 before 19.021.20047 from 17.011.30059 before 17.011.30150 |
| Adobe | Acrobat Reader Dc | from 15.006.30060 before 15.006.30504 from 15.008.20082 before 19.021.20047 from 17.011.30059 before 17.011.30150 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/155224/Adobe-Acrobat-Reader-DC-For-Windows-Malformed-JBIG2Globals-Stream-Uninitialized-Pointer.html
- https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
- http://packetstormsecurity.com/files/155224/Adobe-Acrobat-Reader-DC-For-Windows-Malformed-JBIG2Globals-Stream-Uninitialized-Pointer.html
- https://helpx.adobe.com/security/products/acrobat/apsb19-49.html