CVE-2018-5060
published 2018-07-20CVE-2018-5060: Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read…
PriorityP433medium6.5CVSS 3.0
AVNACLPRNUIRSUCHINAN
EPSS
8.43%
94.4th percentile
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | acrobat_dc | 15.006.30060 – 15.006.30418 | — |
| adobe | acrobat_dc | 15.008.20082 – 18.011.20040 | — |
| adobe | acrobat_dc | 17.011.30059 – 17.011.30080 | — |
| adobe | acrobat_reader_dc | 15.006.30060 – 15.006.30418 | — |
| adobe | acrobat_reader_dc | 15.008.20082 – 18.011.20040 | — |
| adobe | acrobat_reader_dc | 17.011.30059 – 17.011.30080 | — |
CVSS provenance
nvdv3.06.5MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
vendor_cisco8.6HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-fggj-p2mg-q7fv: Adobe Acrobat and Reader 2018
ghsa_unreviewed·2022-05-14
CVE-2018-5060 [MEDIUM] CWE-125 GHSA-fggj-p2mg-q7fv: Adobe Acrobat and Reader 2018
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Cisco
Cisco IOS XE Software NAT Session Initiation Protocol Application Layer Gateway Denial of Service Vulnerability
vendor_cisco·2018-09-26·CVSS 8.6
CVE-2018-0476 [HIGH] CWE-399 Cisco IOS XE Software NAT Session Initiation Protocol Application Layer Gateway Denial of Service Vulnerability
Cisco IOS XE Software NAT Session Initiation Protocol Application Layer Gateway Denial of Service Vulnerability
A vulnerability in the Network Address Translation (NAT) Session Initiation Protocol (SIP) Application Layer Gateway
(ALG) of Cisco IOS XE Software could allow an unauthenticated, remote
attacker to cause an affected device to reload.
The vulnerability is due to improper processing of SIP packets in transit while NAT is performed on an affected device. An unauthenticated, remote attacker could exploit this
vulnerability by sending crafted SIP packets via UDP port 5060 through an affected
device that is performing NAT for SIP packets. A successful exploit
could allow an attacker to cause the device to reload, resulting in a denial of service (DoS) condition.
Cisco has released s
Cisco
Cisco IOS XE Software NAT Session Initiation Protocol Application Layer Gateway Denial of Service Vulnerability
vendor_cisco·CVSS 3.0
CVE-2018-0476 Cisco IOS XE Software NAT Session Initiation Protocol Application Layer Gateway Denial of Service Vulnerability
CVE-2018-0476: Cisco IOS XE Software NAT Session Initiation Protocol Application Layer Gateway Denial of Service Vulnerability
A vulnerability in the Network Address Translation (NAT) Session Initiation Protocol (SIP) Application Layer Gateway (ALG) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to improper processing of SIP packets in transit while NAT is performed on an affected device. An unauthenticated, remote attacker could exploit this vulnerability by sending crafted SIP packets via UDP port 5060 through an affected device that is performing NAT for SIP packets. A successful exploit could allow an attacker to cause the device to reload, resulting in a denial of service (DoS) condition. Cisco h
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2018-07-20
Published