CVE-2018-4910

published 2018-02-27

CVE-2018-4910: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions…

high 8.8 CVSS 3.0

AV N AC L PR N UI R S U C H I H A H

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a heap overflow vulnerability in the JavaScript engine. The vulnerability is triggered by a PDF file with crafted JavaScript code that manipulates the optional content group (OCG). A successful attack can lead to code corruption, control-flow hijack, or a code re-use attack.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
adobe	acrobat	17.0 – 17.011.30070	—
adobe	acrobat_dc	- – 18.009.20050	—
adobe	acrobat_dc	15.0 – 15.006.30394	—
adobe	acrobat_reader	17.0 – 17.011.30070	—
adobe	acrobat_reader_dc	- – 18.009.20050	—
adobe	acrobat_reader_dc	15.0 – 15.006.30394	—

CWE-787