deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-6832
Published: 2018-07-09
Description: Stack-based buffer overflow in the getSWFlag function in Foscam Cameras C1 Lite V3, and C1 V3 with firmware 2.82.2.33 and earlier, FI9800P V3, FI9803P V4, FI9851P V3, and FI9853EP V2 2.84.2.33 and earlier, FI9816P V3, FI9821EP V2, FI9821P V3, FI9826P V3, and FI9831P V3 2.81.2.33 and earlier, C1, C1 V2, C1 Lite, and C1 Lite V2 2.52.2.47 and earlier, FI9800P, FI9800P V2, FI9803P V2, FI9803P V3, and FI9851P V2 2.54.2.47 and earlier, FI9815P, FI9815P V2, FI9816P, and FI9816P V2, 2.51.2.47 and earlier, R2 and R4 2.71.1.59 and earlier, C2 and FI9961EP 2.72.1.59 and earlier, FI9900EP, FI9900P, and FI9901EP 2.74.1.59 and earlier, FI9928P 2.74.1.58 and earlier, FI9803EP and FI9853EP 2.22.2.31 and earlier, FI9803P and FI9851P 2.24.2.31 and earlier, FI9821P V2, FI9826P V2, FI9831P V2, and FI9821EP 2.21.2.31 and earlier, FI9821W V2, FI9831W, FI9826W, FI9821P, FI9831P, and FI9826P 2.11.1.120 and earlier, FI9818W V2 2.13.2.120 and earlier, FI9805W, FI9804W, FI9804P, FI9805E, and FI9805P 2.14.1.120 and earlier, FI9828P, and FI9828W 2.13.1.120 and earlier, and FI9828P V2 2.11.1.133 and earlier allows remote attackers to cause a denial of service (crash and reboot), via the callbackJson parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://blog.vdoo.com/2018/06/06/vdoo-has-found-major-vulnerabilities-in-foscam-cameras/; https://www.foscam.com/company/securing-your-foscam-camera-important-notice.html; https://blog.vdoo.com/2018/06/06/vdoo-has-found-major-vulnerabilities-in-foscam-cameras/
CVE: CVE-2013-2999
Published: 2018-07-09
Description: Cross-site scripting (XSS) vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 84115.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/84115; https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-affect-infosphere-data-replication-dashboard-cve-2013-2999-cve-2013-3001-cve-2013-3000/; https://exchange.xforce.ibmcloud.com/vulnerabilities/84115
CVE: CVE-2013-3000
Published: 2018-07-09
Description: SQL injection vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. IBM X-Force ID: 84116.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/84116; https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-affect-infosphere-data-replication-dashboard-cve-2013-2999-cve-2013-3001-cve-2013-3000/; https://exchange.xforce.ibmcloud.com/vulnerabilities/84116
CVE: CVE-2013-3001
Published: 2018-07-09
Description: Directory traversal vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to read arbitrary files via unspecified vectors. IBM X-Force ID: 84127.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/84127; https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-affect-infosphere-data-replication-dashboard-cve-2013-2999-cve-2013-3001-cve-2013-3000/; https://exchange.xforce.ibmcloud.com/vulnerabilities/84127
CVE: CVE-2013-3017
Published: 2018-07-09
Description: IBM Tivoli Application Dependency Discovery Manager (TADDM) before 7.2.1.5 and 7.2.x before 7.2.2 make it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging support for weak SSL ciphers. IBM X-Force ID: 84353.
CVSS Score: 7.5 (HIGH)
CWE: CWE-310
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/84353; https://www.ibm.com/blogs/psirt/ibm-security-bulletin-taddm-reject-weak-and-medium-ciphers-on-taddm-ports/; https://exchange.xforce.ibmcloud.com/vulnerabilities/84353
CVE: CVE-2018-12977
Published: 2018-07-09
Description: A SQL injection vulnerability in the SoftExpert (SE) Excellence Suite 2.0 allows remote authenticated users to perform SQL heuristics by pulling information from the database with the "cddocument" parameter in the "Downloading Electronic Documents" section.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/44981/; https://www.exploit-db.com/exploits/44981/
CVE: CVE-2018-13034
Published: 2018-07-09
Description: Directory traversal in Jester web framework 0.2.0 allows remote attackers to fetch files in arbitrary locations via "..%f" sequences.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/dom96/jester/blob/master/changelog.markdown; https://github.com/dom96/jester/blob/master/changelog.markdown
CVE: CVE-2018-13787
Published: 2018-07-09
Description: Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware.
CVSS Score: 6.7 (MEDIUM)
References: https://blog.eclypsium.com/2018/06/07/firmware-vulnerabilities-in-supermicro-systems/; https://www.bleepingcomputer.com/news/security/firmware-vulnerabilities-disclosed-in-supermicro-server-products/; https://www.supermicro.com/support/security_Intel-SA-00088.cfm?pg=X10#tab
CVE: CVE-2018-6851
Published: 2018-07-09
Description: Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via IOCTL 0x80206040. By crafting an input buffer we can control the execution path to the point where the constant DWORD 0 will be written to a user-controlled address. We can take advantage of this condition to zero-out the pointer to the security descriptor in the object header of a privileged process or modify the security descriptor itself and run code in the context of a process running as SYSTEM.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://seclists.org/fulldisclosure/2018/Jul/20; https://community.sophos.com/kb/en-us/131934; https://labs.nettitude.com/blog/cve-2018-6851-to-cve-2018-6857-sophos-privilege-escalation-vulnerabilities/
CVE: CVE-2018-6852
Published: 2018-07-09
Description: Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via IOCTL 0x80202298. By crafting an input buffer we can control the execution path to the point where the nt!memset function is called to zero out contents of a user-controlled address. We can take advantage of this condition to zero-out the pointer to the security descriptor in the object header of a privileged process or modify the security descriptor itself and run code in the context of a process running as SYSTEM.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://seclists.org/fulldisclosure/2018/Jul/20; https://community.sophos.com/kb/en-us/131934; https://labs.nettitude.com/blog/cve-2018-6851-to-cve-2018-6857-sophos-privilege-escalation-vulnerabilities/
CVE: CVE-2018-6853
Published: 2018-07-09
Description: Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via IOCTL 0x80206024. By crafting an input buffer we can control the execution path to the point where a global variable will be written to a user controlled address. We can take advantage of this condition to zero-out the pointer to the security descriptor in the object header of a privileged process or modify the security descriptor itself and run code in the context of a process running as SYSTEM.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://seclists.org/fulldisclosure/2018/Jul/20; https://community.sophos.com/kb/en-us/131934; https://labs.nettitude.com/blog/cve-2018-6851-to-cve-2018-6857-sophos-privilege-escalation-vulnerabilities/
CVE: CVE-2018-6854
Published: 2018-07-09
Description: Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via multiple IOCTLs, e.g., 0x8810200B, 0x8810200F, 0x8810201B, 0x8810201F, 0x8810202B, 0x8810202F, 0x8810203F, 0x8810204B, 0x88102003, 0x88102007, 0x88102013, 0x88102017, 0x88102027, 0x88102033, 0x88102037, 0x88102043, and 0x88102047. When some conditions in the user-controlled input buffer are not met, the driver writes an error code (0x2000001A) to a user-controlled address. Also, note that all the aforementioned IOCTLs use transfer type METHOD_NEITHER, which means that the I/O manager does not validate any of the supplied pointers and buffer sizes. So, even though the driver checks for input/output buffer sizes, it doesn't validate if the pointers to those buffers are actually valid. So, we can supply a pointer for the output buffer to a kernel address space address, and the error code will be written there. We can take advantage of this condition to modify the SEP_TOKEN_PRIVILEGES structure of the Token object belonging to the exploit process and grant SE_DEBUG_NAME privilege. This allows the exploit process to interact with higher privileged processes running as SYSTEM and execute code in their security context.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://seclists.org/fulldisclosure/2018/Jul/20; https://community.sophos.com/kb/en-us/131934; https://labs.nettitude.com/blog/cve-2018-6851-to-cve-2018-6857-sophos-privilege-escalation-vulnerabilities/
CVE: CVE-2018-6855
Published: 2018-07-09
Description: Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via IOCTL 0x80202014. By crafting an input buffer we can control the execution path to the point where the constant 0xFFFFFFF will be written to a user-controlled address. We can take advantage of this condition to modify the SEP_TOKEN_PRIVILEGES structure of the Token object belonging to the exploit process and grant SE_DEBUG_NAME privilege. This allows the exploit process to interact with higher privileged processes running as SYSTEM and execute code in their security context.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://seclists.org/fulldisclosure/2018/Jul/20; https://community.sophos.com/kb/en-us/131934; https://labs.nettitude.com/blog/cve-2018-6851-to-cve-2018-6857-sophos-privilege-escalation-vulnerabilities/
CVE: CVE-2018-6856
Published: 2018-07-09
Description: Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via IOCTL 0x8020601C. By crafting an input buffer we can control the execution path to the point where a global variable will be written to a user controlled address. We can take advantage of this condition to zero-out the pointer to the security descriptor in the object header of a privileged process or modify the security descriptor itself and run code in the context of a process running as SYSTEM.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://seclists.org/fulldisclosure/2018/Jul/20; https://community.sophos.com/kb/en-us/131934; https://labs.nettitude.com/blog/cve-2018-6851-to-cve-2018-6857-sophos-privilege-escalation-vulnerabilities/
CVE: CVE-2018-6857
Published: 2018-07-09
Description: Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via IOCTL 0x802022E0. By crafting an input buffer we can control the execution path to the point where the constant 0x12 will be written to a user-controlled address. We can take advantage of this condition to modify the SEP_TOKEN_PRIVILEGES structure of the Token object belonging to the exploit process and grant SE_DEBUG_NAME privilege. This allows the exploit process to interact with higher privileged processes running as SYSTEM and execute code in their security context.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://seclists.org/fulldisclosure/2018/Jul/20; https://community.sophos.com/kb/en-us/131934; https://labs.nettitude.com/blog/cve-2018-6851-to-cve-2018-6857-sophos-privilege-escalation-vulnerabilities/
CVE: CVE-2017-3197
Published: 2018-07-09
Description: GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 (version F6) and GB-BXi7-5775 (version F2) platforms does not securely implement BIOSWE, BLE, SMM_BWP, and PRx features. As a result, the BIOS is not protected from arbitrary write access and may permit modifications to the SPI flash.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-693, CWE-20
References: http://www.securityfocus.com/bid/97294; https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2017-01-001.md; https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2017-01-002.md
CVE: CVE-2017-3198
Published: 2018-07-09
Description: GIGABYTE BRIX UEFI firmware does not cryptographically validate images prior to updating the system firmware. Additionally, the firmware updates are served over HTTP. An attacker can make arbitrary modifications to firmware images without being detected.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-345, CWE-311, CWE-347
References: http://www.securityfocus.com/bid/97294; https://www.cylance.com/en_us/blog/gigabyte-brix-systems-vulnerabilities.html; https://www.kb.cert.org/vuls/id/507496
CVE: CVE-2018-4858
Published: 2018-07-09
Description: A vulnerability has been identified in IEC 61850 system configurator (All versions < V5.80), DIGSI 5 (affected as IEC 61850 system configurator is incorporated) (All versions < V7.80), DIGSI 4 (All versions < V4.93), SICAM PAS/PQS (All versions < V8.11), SICAM PQ Analyzer (All versions < V3.11), SICAM SCC (All versions < V9.02 HF3). A service of the affected products listening on all of the host's network interfaces on either port 4884/TCP, 5885/TCP, or port 5886/TCP could allow an attacker to either exfiltrate limited data from the system or to execute code with Microsoft Windows user permissions. Successful exploitation requires an attacker to be able to send a specially crafted network request to the vulnerable service and a user interacting with the service's client application on the host. In order to execute arbitrary code with Microsoft Windows user permissions, an attacker must be able to plant the code in advance on the host by other means. The vulnerability has limited impact to confidentiality and integrity of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known. Siemens confirms the security vulnerability and provides mitigations to resolve the security issue.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/105933; https://cert-portal.siemens.com/productcert/pdf/ssa-159860.pdf; https://ics-cert.us-cert.gov/advisories/ICSA-18-317-01
CVE: CVE-2018-4945
Published: 2018-07-09
Description: Adobe Flash Player versions 29.0.0.171 and earlier have a Type Confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-704
References: http://www.securityfocus.com/bid/104413; http://www.securitytracker.com/id/1041058; https://access.redhat.com/errata/RHSA-2018:1827
CVE: CVE-2018-4946
Published: 2018-07-09
Description: Adobe Photoshop CC versions 19.1.3 and earlier, 18.1.3 and earlier, and 18.1.2 and earlier have an Out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/104171; http://www.securitytracker.com/id/1040919; https://helpx.adobe.com/security/products/photoshop/apsb18-17.html
CVE: CVE-2018-4947
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have a Heap Overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.securityfocus.com/bid/104172; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4948
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have a Heap Overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.securityfocus.com/bid/104172; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4949
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/104175; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4950
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have an Out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.securityfocus.com/bid/104174; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4951
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/104175; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4952
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have a Use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/104169; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4953
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have a Type Confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-704
References: http://www.securityfocus.com/bid/104173; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4954
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have a Use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/104169; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4955
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/104175; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4956
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/104175; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4957
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/104175; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4958
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have a Use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/104169; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4959
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have a Use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/104169; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4960
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/104175; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4961
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have a Use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/104169; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4962
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/104175; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4963
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/104175; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html