Security Alert (A18-02-04): Multiple Vulnerabilities in Adobe Reader/Acrobat


 

Published on: 14 February 2018

  
  

Description:

Security updates are released for Adobe Reader/Acrobat to address multiple vulnerabilities. To exploit the vulnerabilities, a remote attacker would entice a targeted user to open a specially crafted PDF file.

Please also note that the support for Adobe Acrobat XI 11.x and Adobe Reader XI 11.x ended on 15.10.2017. Users should arrange software replacement by adopting other supported products as soon as possible.

 

Affected Systems:

  • Adobe Acrobat/Acrobat Reader 2017 2017.011.30070 and earlier versions
  • Adobe Acrobat DC/Acrobat Reader DC Continuous 2018.009.20050 and earlier versions
  • Adobe Acrobat DC/Acrobat Reader DC Classic 2015.006.30394 and earlier versions

 

Impact:

A successful exploitation could lead to arbitrary code execution, remote code execution, privilege escalation or attackers' control of the affected system.

 

Recommendation:

Upgrade Adobe Reader/Acrobat to the following versions to address the issues. The upgrade can be obtained by using the auto-update mechanism or by downloading at the following URLs:

  • Adobe Acrobat DC Continuous 2018.011.20035, Acrobat DC Classic 2015.006.30413 for Windows, Acrobat DC Classic 2015.006.30416 for Macintosh , Acrobat 2017 2017.011.30078, Acrobat Reader 2017 2017.011.30078
    http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows
    http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Mac

  • Adobe Acrobat Reader DC Classic 2015.006.30413 for Windows, Adobe Acrobat Reader DC Classic 2015.006.30416 for Macintosh, Adobe Acrobat Reader DC Continuous 2018.011.20035
    http://get.adobe.com/reader/

 

More Information:

https://helpx.adobe.com/security/products/acrobat/apsb18-02.html
https://helpx.adobe.com/acrobat/kb/end-of-support-acrobat-xi-reader-xi.html
https://www.hkcert.org/my_url/en/alert/18021402
https://www.us-cert.gov/ncas/current-activity/2018/02/13/Adobe-Releases-Security-Updates
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4872
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4879 (to CVE-2018-4918)

 



Tag: Adobe , Acrobat , Acrobat Reader , Adobe Reader
Tags