CVEvulnerability
CVE-2018-16042
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-01-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-347
Description
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a security bypass vulnerability. Successful exploitation could lead to information disclosure.
Affected configurations
• adobe acrobat dc (>= 15.006.30060 <= 15.006.30457)
• adobe acrobat dc (>= 15.008.20082 <= 19.008.20081)
• adobe acrobat dc (>= 17.011.30056 <= 17.011.30106)
• adobe acrobat reader dc (>= 15.006.30060 <= 15.006.30457)
• adobe acrobat reader dc (>= 15.008.20082 <= 19.008.20081)
• adobe acrobat reader dc (>= 17.011.30059 <= 17.011.30106)
• adobe reader 11.0.10
• adobe reader 11.0.23
• iskysoft pdf editor 6 6.4.2.3521
• iskysoft pdfelement6 6.8.0.3523
• iskysoft pdfelement6 6.8.4.3921
• adobe acrobat dc (>= 15.006.30060 <= 15.006.30456)
• adobe acrobat dc (>= 15.008.20082 <= 19.008.20080)
• adobe acrobat dc (>= 17.011.30056 <= 17.011.30105)
• adobe acrobat reader dc (>= 15.006.30060 <= 15.006.30456)
• adobe acrobat reader dc (>= 15.008.20082 <= 19.008.20080)
• adobe acrobat reader dc (>= 17.011.30059 <= 17.011.30105)
• iskysoft pdf editor 6 6.6.2.3315
• iskysoft pdf editor 6 6.7.6.3399
• iskysoft pdfelement6 6.7.1.3355
• iskysoft pdfelement6 6.7.6.3399
Related
Weakness · CWE (1)
- CWE-347 Improper Verification of Cryptographic Signature weakness
References
- http://www.securityfocus.com/bid/106159 Third Party Advisory, VDB Entry
- https://helpx.adobe.com/security/products/acrobat/apsb18-41.html Patch, Vendor Advisory
- https://pdf-insecurity.org/signature/evaluation_2018.html Third Party Advisory
- https://pdf-insecurity.org/signature/signature.html Third Party Advisory
- https://www.pdfa.org/recently-identified-pdf-digital-signature-vulnerabilities/ Third Party Advisory
- http://www.securityfocus.com/bid/106159 Third Party Advisory, VDB Entry
- https://helpx.adobe.com/security/products/acrobat/apsb18-41.html Patch, Vendor Advisory
- https://pdf-insecurity.org/signature/evaluation_2018.html Third Party Advisory
- https://pdf-insecurity.org/signature/signature.html Third Party Advisory
- https://www.pdfa.org/recently-identified-pdf-digital-signature-vulnerabilities/ Third Party Advisory