Adobe Acrobat CoolType Out of Bounds Read

Strike ID:
E18-mbfm1
CVSS:
6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
False Positive:
f
Variants:
1
Year:
2018

Description

This strike exploits an out-of-bounds read vulnerability in Adobe Acrobat Reader. The vulnerability is due to improper parsing of an embedded font by the CoolType module. An exploit could be triggered by opening a crafted XPS document. Successful exploitation could result in information disclosure which could be used to further compromise the target system.

CVE

References

Bid