Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an integer overflow vulnerability. Successful exploitation could lead to information disclosure.
Published 2019-01-18 17:29:15
Updated 2019-08-21 16:20:24
View at NVD,   CVE.org
Vulnerability category: OverflowInformation leak

Products affected by CVE-2018-16009

  • Adobe » Acrobat Dc » Classic Edition
    Versions from including (>=) 17.011.30056 and up to, including, (<=) 17.011.30106
    cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*
    When used together with: Microsoft » Windows » Version: N/A
  • Adobe » Acrobat Dc » Continuous Edition
    Versions from including (>=) 15.008.20082 and up to, including, (<=) 19.008.20081
    cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*
    When used together with: Microsoft » Windows » Version: N/A
  • Adobe » Acrobat Dc » Classic Edition
    Versions from including (>=) 15.006.30060 and up to, including, (<=) 15.006.30456
    cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*
    When used together with: Apple » Mac Os X » Version: N/A
  • Adobe » Acrobat Dc » Continuous Edition
    Versions from including (>=) 15.008.20082 and up to, including, (<=) 19.008.20080
    cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*
    When used together with: Apple » Mac Os X » Version: N/A
  • Adobe » Acrobat Dc » Classic Edition
    Versions from including (>=) 17.011.30056 and up to, including, (<=) 17.011.30105
    cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*
    When used together with: Apple » Mac Os X » Version: N/A
  • Adobe » Acrobat Dc » Classic Edition
    Versions from including (>=) 15.006.30060 and up to, including, (<=) 15.006.30457
    cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*
    When used together with: Microsoft » Windows » Version: N/A
  • Adobe » Acrobat Reader Dc » Classic Edition
    Versions from including (>=) 15.006.30060 and up to, including, (<=) 15.006.30457
    cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*
    When used together with: Microsoft » Windows » Version: N/A
  • Adobe » Acrobat Reader Dc » Continuous Edition
    Versions from including (>=) 15.008.20082 and up to, including, (<=) 19.008.20080
    cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*
    When used together with: Apple » Mac Os X » Version: N/A
  • Adobe » Acrobat Reader Dc » Continuous Edition
    Versions from including (>=) 15.008.20082 and up to, including, (<=) 19.008.20081
    cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*
    When used together with: Microsoft » Windows » Version: N/A
  • Adobe » Acrobat Reader Dc » Classic Edition
    Versions from including (>=) 15.006.30060 and up to, including, (<=) 15.006.30456
    cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*
    When used together with: Apple » Mac Os X » Version: N/A
  • Adobe » Acrobat Reader Dc » Classic Edition
    Versions from including (>=) 17.011.30059 and up to, including, (<=) 17.011.30105
    cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*
    When used together with: Apple » Mac Os X » Version: N/A
  • Adobe » Acrobat Reader Dc » Classic Edition
    Versions from including (>=) 17.011.30059 and up to, including, (<=) 17.011.30106
    cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*
    When used together with: Microsoft » Windows » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2018-16009

0.78%
Probability of exploitation activity in the next 30 days EPSS Score History
~ 82 %
Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-16009

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source First Seen
4.3
MEDIUM AV:N/AC:M/Au:N/C:P/I:N/A:N
8.6
2.9
NIST
6.5
MEDIUM CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
2.8
3.6
NIST

CWE ids for CVE-2018-16009

  • The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
    Assigned by: nvd@nist.gov (Primary)

References for CVE-2018-16009

Jump to
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!