CVE-2018-4993

HIGH 7.5EPSS 86.9%

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an NTLM SSO hash theft vulnerability. Successful exploitation could lead to information disclosure.

CVSS v3.0: 7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0: 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS: 86.90% chance of exploitation in the next 30 days, 100th percentile
Published: 2018-07-09
Updated: 2024-08-05

Proof-of-concept exploits (1)

zenzue/Simple-Malicious-PDf0★ · 2024-09-22

Metasploit modules (1)

rapid7/metasploit-framework/blob/master/modules/auxiliary/fileformat/badpdf.rb

References

Related