CVE-2018-4879
CRITICAL 9.8EPSS 28.6%
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. The vulnerability is caused by the computation that writes data past the end of the intended buffer; the computation is part of the image conversion module that processes Enhanced Metafile Format Plus (EMF+) data. An attacker can potentially leverage the vulnerability to corrupt sensitive data or execute arbitrary code.
- Affected
- Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions
- CVSS v3.0 NVD
- 9.8 CRITICAL
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 10.0 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 28.63% chance of exploitation in the next 30 days, 98th percentile
- Published
- 2018-02-27
- Updated
- 2024-08-05
Proof-of-concept exploits (1)
- H3llozy/CVE-2018-48790★ · 2018-03-15
Security advisories
- https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
- http://www.securityfocus.com/bid/102994
- http://www.securitytracker.com/id/1040364