CVE-2018-4917

CRITICAL 9.8CVE-2018-4917 · Published 19/05/2018 · updated 17/06/2026

Package	Affected versions	Patched versions
acrobat 2017 adobe	`≥ 17.011.30070, < 17.011.30078`	`17.011.30078`
acrobat dc adobe	`≥ 15.006.30394, < 15.006.30413≥ 18.009.20050, < 18.011.20035`	`15.006.3041318.011.20035`
acrobat reader 2017 adobe	`≥ 17.011.30070, < 17.011.30078`	`17.011.30078`
acrobat reader dc adobe	`≥ 15.006.30394, < 15.006.30413≥ 18.009.20050, < 18.011.20035`	`15.006.3041318.011.20035`

Description

Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, 2015.006.30394 and earlier have an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

References

securityfocus.com/bid/102992 · Third Party Advisory
securitytracker.com/id/1040364 · Third Party Advisory
helpx.adobe.com/security/products/acrobat/apsb18-02.html · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free