CVE-2018-4902
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the rendering engine. The vulnerability is triggered by a crafted PDF file containing a video annotation (and corresponding media files) that is activated by the embedded JavaScript. Successful exploitation could lead to arbitrary code execution.
- Score
- CVSS 3.0 8.8 High
- Status
- Modified - psirt@adobe.com
- Published
- 2018-02-27
- Last modified
- 2024-08-05
- Weaknesses
- CWE-416
Affected products
References
- http://www.securityfocus.com/bid/102995
- http://www.securitytracker.com/id/1040364
- https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
