CVE-2018-12799 — NULL Pointer Dereference in Adobe Acrobat DC

CWE-476 — NULL Pointer Dereference7 documents3 sources

Severity

8.8HIGHNVD

EPSS

3.1%

top 13.23%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Adobe Acrobat DC Adobe Acrobat Reader DC

Timeline

PublishedAug 29

Latest updateMay 14

Description

Adobe Acrobat and Reader versions 2018.011.20055 and earlier, 2017.011.30096 and earlier, and 2015.006.30434 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶NVDadobe/acrobat_reader_dc15.006.30060 — 15.006.30434+2

▶NVDadobe/acrobat_dc15.006.30060 — 15.006.30434+2

Patches

Patch: helpx.adobe.com ↗Patch: helpx.adobe.com ↗

🔴Vulnerability Details

GHSA

GHSA-wvcg-3vpx-g7j3: Adobe Acrobat and Reader versions 2018↗2022-05-14

▶