CVE-2018-4953

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Type Confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
References
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*
cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*
cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*
OR cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

21 Nov 2024, 04:07

Type Values Removed Values Added
References () http://www.securityfocus.com/bid/104173 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/104173 - Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id/1040920 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1040920 - Third Party Advisory, VDB Entry
References () https://helpx.adobe.com/security/products/acrobat/apsb18-09.html - Patch, Vendor Advisory () https://helpx.adobe.com/security/products/acrobat/apsb18-09.html - Patch, Vendor Advisory

Information

Published : 2018-07-09 19:29

Updated : 2024-11-21 04:07


NVD link : CVE-2018-4953

Mitre link : CVE-2018-4953

CVE.ORG link : CVE-2018-4953


JSON object : View

Products Affected

apple

  • mac_os_x

adobe

  • acrobat_reader_dc
  • acrobat_dc

microsoft

  • windows
CWE
CWE-704

Incorrect Type Conversion or Cast