CVE-2018-4883
medium · 6.5An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs because of computation that reads data that is past the end of the target buffer; the computation is part of the image conversion engine that handles Enhanced Metafile Format (EMF). A successful attack can lead to sensitive data exposure.
6.5
CVSS
10.8%
EPSS (exploit prob.)
96th
EPSS percentile
2018-02-27
Published
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Weaknesses
CWE-125
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| adobe | acrobat | > 17.0, <= 17.011.30070 |
| adobe | acrobat_dc | >= -, <= 18.009.20050 |
| adobe | acrobat_dc | >= 15.0, <= 15.006.30394 |
| adobe | acrobat_reader | >= 17.0, <= 17.011.30070 |
| adobe | acrobat_reader_dc | >= -, <= 18.009.20050 |
| adobe | acrobat_reader_dc | >= 15.0, <= 15.006.30394 |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2018-4883