CVE-2018-4887

published 2018-02-27

CVE-2018-4887: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions…

medium 6.5 CVSS 3.0

AV N AC L PR N UI R S U C H I N A N

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of the Unicode mapping module that is invoked when processing Enhanced Metafile Format (EMF) data (during image conversion). A successful attack can lead to sensitive data exposure.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
adobe	acrobat	17.0 – 17.011.30070	—
adobe	acrobat_dc	- – 18.009.20050	—
adobe	acrobat_dc	15.0 – 15.006.30394	—
adobe	acrobat_reader	17.0 – 17.011.30070	—
adobe	acrobat_reader_dc	- – 18.009.20050	—
adobe	acrobat_reader_dc	15.0 – 15.006.30394	—

CWE-125