JPCERT-AT-2018-0040 JPCERT/CC 2018-10-02 <<< JPCERT/CC Alert 2018-10-02 >>> Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB18-30) https://www.jpcert.or.jp/english/at/2018/at180040.html I. Overview Multiple vulnerabilities exist in Adobe Acrobat, a PDF file creation and conversion software, and Adobe Acrobat Reader, a PDF file viewing software. As a result, an attacker may execute arbitrary code or disclose information by convincing a user to open contents leveraging the vulnerabilities. For more information, please refer to the Adobe website. Adobe Systems Incorporated Security Bulletin for Adobe Acrobat and Reader | APSB18-30 https://helpx.adobe.com/security/products/acrobat/apsb18-30.html II. Affected Products Affected products and versions are as follows: - Adobe Acrobat Reader DC Continuous (2018.011.20063) and earlier - Adobe Acrobat Reader 2017 Classic 2017 (2017.011.30102) and earlier - Adobe Acrobat Reader DC Classic 2015 (2015.006.30452) and earlier - Adobe Acrobat DC Continuous (2018.011.20063) and earlier - Adobe Acrobat 2017 Classic 2017 (2017.011.30102) and earlier - Adobe Acrobat DC Classic 2015 (2015.006.30452) and earlier III. Solution Please update Adobe Acrobat and Reader to the latest version listed below. - Adobe Acrobat Reader DC Continuous (2019.008.20071) - Adobe Acrobat Reader 2017 Classic 2017 (2017.011.30105) - Adobe Acrobat Reader DC Classic 2015 (2015.006.30456) - Adobe Acrobat DC Continuous (2019.008.20071) - Adobe Acrobat 2017 Classic 2017 (2017.011.30105) - Adobe Acrobat DC Classic 2015 (2015.006.30456) Acrobat will be updated by starting the product, selecting the menu "Help (H)", and then clicking "Check for Updates (U)". If an update from the menu is not available, please download the latest Adobe Acrobat and Reader from the following URL. For more information, please refer to the Adobe website. Adobe.com - New downloads https://supportdownloads.adobe.com/new.jsp IV. References Adobe Systems Incorporated Security Bulletin for Adobe Acrobat and Reader | APSB18-30 https://helpx.adobe.com/security/products/acrobat/apsb18-30.html Adobe Systems Incorporated Security updates available for Adobe Acrobat and Reader (APSB18-30) https://blogs.adobe.com/psirt/?p=1624 If you have any information regarding this alert, please contact JPCERT/CC. ====================================================================== JPCERT Coordination Center (JPCERT/CC) MAIL: info@jpcert.or.jp TEL: +81-3-3518-4600 FAX: +81-3-3518-4602 https://www.jpcert.or.jp/english/