Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-16042

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a security bypass vulnerability. Successful exploitation could lead to information disclosure.

Published

2019-01-18T17:29:31.230

Last Modified

2024-11-21T03:51:59.113

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: NONE

Exploitability Score

10.0

Impact Score

4.9

Weaknesses

Type: Primary
CWE-347

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	adobe	acrobat_dc	≤ 15.006.30457	Yes
Application	adobe	acrobat_dc	≤ 19.008.20081	Yes
Application	adobe	acrobat_dc	≤ 17.011.30106	Yes
Application	adobe	acrobat_reader_dc	≤ 15.006.30457	Yes
Application	adobe	acrobat_reader_dc	≤ 19.008.20081	Yes
Application	adobe	acrobat_reader_dc	≤ 17.011.30106	Yes
Application	adobe	reader	11.0.10	Yes
Application	adobe	reader	11.0.23	Yes
Application	iskysoft	pdf_editor_6	6.4.2.3521	Yes
Application	iskysoft	pdfelement6	6.8.0.3523	Yes
Application	iskysoft	pdfelement6	6.8.4.3921	Yes
Operating System	microsoft	windows	-	No
Application	adobe	acrobat_dc	≤ 15.006.30456	Yes
Application	adobe	acrobat_dc	≤ 19.008.20080	Yes
Application	adobe	acrobat_dc	≤ 17.011.30105	Yes
Application	adobe	acrobat_reader_dc	≤ 15.006.30456	Yes
Application	adobe	acrobat_reader_dc	≤ 19.008.20080	Yes
Application	adobe	acrobat_reader_dc	≤ 17.011.30105	Yes
Application	adobe	reader	11.0.10	Yes
Application	adobe	reader	11.0.23	Yes
Application	iskysoft	pdf_editor_6	6.6.2.3315	Yes
Application	iskysoft	pdf_editor_6	6.7.6.3399	Yes
Application	iskysoft	pdfelement6	6.7.1.3355	Yes
Application	iskysoft	pdfelement6	6.7.6.3399	Yes
Operating System	apple	mac_os_x	-	No
Application	adobe	acrobat_dc	≤ 15.006.30456	Yes
Application	adobe	acrobat_dc	≤ 19.008.20080	Yes
Application	adobe	acrobat_dc	≤ 17.011.30105	Yes
Application	adobe	acrobat_reader_dc	≤ 15.006.30456	Yes
Application	adobe	acrobat_reader_dc	≤ 19.008.20080	Yes
Application	adobe	acrobat_reader_dc	≤ 17.011.30105	Yes
Operating System	linux	linux_kernel	-	No

References

http://www.securityfocus.com/bid/106159 Third Party Advisory, VDB Entry ([email protected])
https://helpx.adobe.com/security/products/acrobat/apsb18-41.html Patch, Vendor Advisory ([email protected])
https://pdf-insecurity.org/signature/evaluation_2018.html Third Party Advisory ([email protected])
https://pdf-insecurity.org/signature/signature.html Third Party Advisory ([email protected])
https://www.pdfa.org/recently-identified-pdf-digital-signature-vulnerabilities/ Third Party Advisory ([email protected])
http://www.securityfocus.com/bid/106159 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://helpx.adobe.com/security/products/acrobat/apsb18-41.html Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://pdf-insecurity.org/signature/evaluation_2018.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://pdf-insecurity.org/signature/signature.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.pdfa.org/recently-identified-pdf-digital-signature-vulnerabilities/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)