Executive Summary

Informations
Name CVE-2018-16042 First vendor Publication 2019-01-18
Vendor Cve Last vendor Modification 2021-01-14

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Overall CVSS Score 6.5
Base Score 6.5 Environmental Score 6.5
impact SubScore 2.5 Temporal Score 6.5
Exploitabality Sub Score 3.9
 
Attack Vector Network Attack Complexity Low
Privileges Required None User Interaction None
Scope Unchanged Confidentiality Impact Low
Integrity Impact Low Availability Impact None
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:N)
Cvss Base Score 6.4 Attack Range Network
Cvss Impact Score 4.9 Attack Complexity Low
Cvss Expoit Score 10 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a security bypass vulnerability. Successful exploitation could lead to information disclosure.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16042

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-347 Improper Verification of Cryptographic Signature

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 102
Application 98
Application 2
Application 3
Application 4

Snort® IPS/IDS

Date Description
2019-02-26 Adobe Reader PPKLite security handler memory corruption vulnerability attempt
RuleID : 48968 - Revision : 2 - Type : FILE-PDF
2019-02-26 Adobe Reader PPKLite security handler memory corruption vulnerability attempt
RuleID : 48967 - Revision : 2 - Type : FILE-PDF
2019-02-26 Adobe Reader PPKLite security handler memory corruption vulnerability attempt
RuleID : 48966 - Revision : 2 - Type : FILE-PDF
2019-02-26 Adobe Reader PPKLite security handler memory corruption vulnerability attempt
RuleID : 48965 - Revision : 2 - Type : FILE-PDF

Nessus® Vulnerability Scanner

Date Description
2018-12-14 Name : The version of Adobe Acrobat installed on the remote Windows host is affected...
File : adobe_acrobat_apsb18-41.nasl - Type : ACT_GATHER_INFO
2018-12-14 Name : The version of Adobe Reader installed on the remote Windows host is affected ...
File : adobe_reader_apsb18-41.nasl - Type : ACT_GATHER_INFO
2018-12-14 Name : The version of Adobe Acrobat installed on the remote host is affected by mult...
File : macosx_adobe_acrobat_apsb18-41.nasl - Type : ACT_GATHER_INFO
2018-12-14 Name : The version of Adobe Reader installed on the remote host is affected by multi...
File : macosx_adobe_reader_apsb18-41.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source Url
BID http://www.securityfocus.com/bid/106159
CONFIRM https://helpx.adobe.com/security/products/acrobat/apsb18-41.html
MISC https://pdf-insecurity.org/signature/evaluation_2018.html
https://pdf-insecurity.org/signature/signature.html
https://www.pdfa.org/recently-identified-pdf-digital-signature-vulnerabilities/

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
Date Informations
2021-01-15 00:22:43
  • Multiple Updates
2021-01-07 21:23:52
  • Multiple Updates
2020-05-23 02:12:10
  • Multiple Updates
2020-05-23 01:08:28
  • Multiple Updates
2019-08-21 21:19:37
  • Multiple Updates
2019-01-23 00:19:15
  • Multiple Updates
2019-01-21 05:18:28
  • Multiple Updates
2019-01-18 21:19:22
  • First insertion