New MCP server — Bring vulnerability intelligence into your AI
Back to feed

CVE-2018-4897

NVDCIRCLENISA

EUVD-2018-16682 · Published Feb 27, 2018

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of the image conversion module that parses TIFF metadata. A successful attack can lead to sensitive data exposure.

Technologies

Adobe Acrobat DcAdobe AcrobatAdobe Acrobat Reader DcAdobe Acrobat Reader

Weaknesses

CWE-125

CVSS scores

  • v3.06.5CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
  • v2.04.3AV:N/AC:M/Au:N/C:P/I:N/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

Initial Access

References

Potentially impacted assets

See if this affects your attack surface

News

Our latest news

Couldn’t load the latest news.

Take 15 minutes to discover our platform with our experts

PatrowlIntel platform screenshot