RULE(RULE ID:712738)

Rule General Information
Release Date: 2018-09-25
Rule Name: Adobe Acrobat PDF Use After Free Vulnerability (CVE-2018-4961)
Severity:
CVE ID:
Rule Protection Details
Description: Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Impact: Successfully exploiting these issues allows attackers to execute arbitrary code in the context of the affected application. Failed exploits will result in denial-of-service conditions.
Affected OS: Network Device, Solaris, FreeBSD, Windows, Mac OS, iOS, Other Unix, Linux, Others, Android
Reference: SecurityFocusBID:104169
SecurityTrackerID:1040920
AdobeSecurityBulletins:apsb18-09
Solutions
Upgrading to version 2015.006.30418, 2017.011.30080 or 2018.011.20040 eliminates this vulnerability.