Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Published 2019-01-18 17:29:37
Updated 2019-08-21 16:20:24
View at NVD,   CVE.org
Vulnerability category: Information leak

Products affected by CVE-2018-19703

  • Adobe » Acrobat Dc » Classic Edition
    Versions from including (>=) 17.011.30056 and up to, including, (<=) 17.011.30106
    cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*
    When used together with: Microsoft » Windows » Version: N/A
  • Adobe » Acrobat Dc » Continuous Edition
    Versions from including (>=) 15.008.20082 and up to, including, (<=) 19.008.20081
    cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*
    When used together with: Microsoft » Windows » Version: N/A
  • Adobe » Acrobat Dc » Classic Edition
    Versions from including (>=) 15.006.30060 and up to, including, (<=) 15.006.30456
    cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*
    When used together with: Apple » Mac Os X » Version: N/A
  • Adobe » Acrobat Dc » Continuous Edition
    Versions from including (>=) 15.008.20082 and up to, including, (<=) 19.008.20080
    cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*
    When used together with: Apple » Mac Os X » Version: N/A
  • Adobe » Acrobat Dc » Classic Edition
    Versions from including (>=) 17.011.30056 and up to, including, (<=) 17.011.30105
    cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*
    When used together with: Apple » Mac Os X » Version: N/A
  • Adobe » Acrobat Dc » Classic Edition
    Versions from including (>=) 15.006.30060 and up to, including, (<=) 15.006.30457
    cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*
    When used together with: Microsoft » Windows » Version: N/A
  • Adobe » Acrobat Reader Dc » Classic Edition
    Versions from including (>=) 15.006.30060 and up to, including, (<=) 15.006.30457
    cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*
    When used together with: Microsoft » Windows » Version: N/A
  • Adobe » Acrobat Reader Dc » Continuous Edition
    Versions from including (>=) 15.008.20082 and up to, including, (<=) 19.008.20080
    cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*
    When used together with: Apple » Mac Os X » Version: N/A
  • Adobe » Acrobat Reader Dc » Continuous Edition
    Versions from including (>=) 15.008.20082 and up to, including, (<=) 19.008.20081
    cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*
    When used together with: Microsoft » Windows » Version: N/A
  • Adobe » Acrobat Reader Dc » Classic Edition
    Versions from including (>=) 15.006.30060 and up to, including, (<=) 15.006.30456
    cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*
    When used together with: Apple » Mac Os X » Version: N/A
  • Adobe » Acrobat Reader Dc » Classic Edition
    Versions from including (>=) 17.011.30059 and up to, including, (<=) 17.011.30105
    cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*
    When used together with: Apple » Mac Os X » Version: N/A
  • Adobe » Acrobat Reader Dc » Classic Edition
    Versions from including (>=) 17.011.30059 and up to, including, (<=) 17.011.30106
    cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*
    When used together with: Microsoft » Windows » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2018-19703

0.20%
Probability of exploitation activity in the next 30 days EPSS Score History
~ 57 %
Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-19703

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source First Seen
4.3
MEDIUM AV:N/AC:M/Au:N/C:P/I:N/A:N
8.6
2.9
NIST
5.5
MEDIUM CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1.8
3.6
NIST

CWE ids for CVE-2018-19703

  • The product reads data past the end, or before the beginning, of the intended buffer.
    Assigned by: nvd@nist.gov (Primary)

References for CVE-2018-19703

Jump to
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!