CVE-2018-12847

EUVD-2018-4800 · Published Oct 12, 2018

Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.

Technologies

Microsoft WindowsAdobe Acrobat DcAdobe Acrobat Reader DcApple Mac Os X

Weaknesses

CWE-787

CVSS scores

v3.07.8CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
v2.06.8AV:N/AC:M/Au:N/C:P/I:P/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

http://www.securityfocus.com/bid/105436
http://www.securitytracker.com/id/1041809
https://helpx.adobe.com/security/products/acrobat/apsb18-30.html

Potentially impacted assets

See if this affects your attack surface