CVE-2019-16451

EPSS 34.7%

Vexday Risk Score

35Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS —EPSS 34.7%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Lifecycle

11 Dec 2019Public PoC

19 Dec 2019Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution .

Affected products

Adobe · Adobe Acrobat and Reader

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/47769unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://helpx.adobe.com/security/products/acrobat/apsb19-55.html https://www.zerodayinitiative.com/advisories/ZDI-20-145/