Information disclosure in Adobe Reader and Adobe Acrobat - CVE-2019-7815
Published: February 21, 2019
Vulnerability identifier: #VU17820
CSH Severity: Medium
CVSS v4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2019-7815
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to insufficient measures, implemented in patch for Adobe Acrobat and Reader in versions 2019.010.20091, 2017.011.30120 and 2015.006.30475, described in SB2019021207 #3 (CVE-2019-7089). A remote attacker can bypass implemented protection and gain unauthorized access to sensitive information on the system.
Affected software
Adobe Reader
Adobe Acrobat
Adobe Acrobat
How to mitigate CVE-2019-7815
Install updates from vendor's website.
Adobe Reader - addressed in versions 15.006.30482, 17.011.30127, 19.010.20098
Adobe Acrobat - addressed in versions 15.006.30482, 17.011.30127, 19.010.20098
Adobe Acrobat - addressed in versions 15.006.30482, 17.011.30127, 19.010.20098