Security Alert (A19-01-01): Multiple Vulnerabilities in Adobe Reader/Acrobat


 

Published on: 04 January 2019

  
  

Description:

Security updates are released for Adobe Reader and Acrobat to address multiple vulnerabilities.  To exploit the vulnerabilities, a remote attacker would entice a targeted user to open a specially crafted PDF file.

 

Affected Systems:

  • Acrobat DC for Windows and macOS Continuous 2019.010.20064 and earlier versions
  • Acrobat Reader DC for Windows and macOS Continuous 2019.010.20064 and earlier versions
  • Acrobat 2017 Classic 2017 for Windows and macOS 2017.011.30110 and earlier version
  • Acrobat Reader 2017 Classic 2017 for Windows and macOS 2017.011.30110 and earlier version
  • Acrobat DC Classic 2015 for Windows and macOS 2015.006.30461 and earlier versions
  • Acrobat Reader DC Classic 2015 for Windows and macOS 2015.006.30461 and earlier versions

 

Impact:

A successful exploitation could lead to arbitrary code execution and privilege escalation of an affected system.

 

Recommendation:

Users of affected systems should update the Adobe Reader and Acrobat to the following versions to address the issues.

  • Acrobat DC for Windows and macOS Continuous 2019.010.20069
  • Acrobat Reader DC for Windows and macOS Continuous 2019.010.20069
  • Acrobat 2017 Classic 2017 for Windows and macOS 2017.011.30113
  • Acrobat Reader 2017 Classic 2017 for Windows and macOS 2017.011.30113
  • Acrobat DC Classic 2015 for Windows and macOS 2015.006.30464
  • Acrobat Reader DC Classic 2015 for Windows and macOS 2015.006.30464

The updates can be obtained by using the auto-update mechanism or by downloading at the following URLs:

  • http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows
  • http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Mac

 

More Information:

https://helpx.adobe.com/security/products/acrobat/apsb19-02.html
https://www.hkcert.org/my_url/en/alert/19010401
https://www.us-cert.gov/ncas/current-activity/2019/01/03/Adobe-Releases-Security-Updates
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16011
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16018

 



Tag: Acrobat , Acrobat Reader , Adobe , Adobe Reader
Tags
OSZAR »