CVE-2018-4893

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of XPS font processing. A successful attack can lead to sensitive data exposure.

Score

CVSS 3.0 6.5 Medium

Status

Modified - psirt@adobe.com

Published

2018-02-27

Last modified

2024-08-05

Weaknesses

CWE-125

Affected products

• Acrobat (Adobe)
• Acrobat Dc (Adobe)
• Acrobat Reader (Adobe)
• Acrobat Reader Dc (Adobe)

References

• http://www.securityfocus.com/bid/102996
• http://www.securitytracker.com/id/1040364
• https://helpx.adobe.com/security/products/acrobat/apsb18-02.html