CVE-2019-16470
CoolType.dll crash - Tianfu Cup
At a glance Severity HIGH 7.8 EPSS EPSS 0.48 % · percentile 41 (2026-10-27) State PUBLISHED Published 2023-09-11 Updated 2024-08-05 Assigner adobe NVD status Modified Description Adobe Acrobat Reader versions 2019.021.20056 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Scores Version Score Vector Scored by CVSS 3.1 HIGH 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H adobe CVSS 3.1 HIGH 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H NVD · psirt@adobe.com (Secondary) CVSS 3.1 HIGH 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H NVD · nvd@nist.gov (Primary)
Weaknesses (CWE)
European references
Affected configurations (NVD CPE) cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:* ≥ 15.006.30060 ≤ 15.006.30505cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:* ≥ 15.008.20082 ≤ 19.021.20056cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:* ≥ 17.011.30059 ≤ 17.011.30152cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:* ≥ 15.006.30060 ≤ 15.006.30505cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:* ≥ 15.008.20082 ≤ 19.021.20056cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:* ≥ 17.011.30059 ≤ 17.011.30152cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:* ≥ 17.011.30059 ≤ 17.011.30155Affected products
References
Sources
