CVE-2018-5012

Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Score

CVSS 3.0 8.8 High

Status

Modified - psirt@adobe.com

Published

2018-07-20

Last modified

2024-08-05

Weaknesses

CWE-476, CWE-822

Affected products

• Acrobat Dc (Adobe)
• Acrobat Reader Dc (Adobe)

References

• http://www.securityfocus.com/bid/104701
• http://www.securitytracker.com/id/1041250
• https://helpx.adobe.com/security/products/acrobat/apsb18-21.html