HTTP: Adobe Acrobat and Reader PDF GoToE Information Disclosure

This signature detects attempts to exploit a known vulnerability against Adobe Reader and Acrobat. Successful exploitation could result in information disclosure.

Extended Description

Adobe Acrobat and Reader versions 2019.008.20080 and earlier, 2017.011.30105 and earlier, and 2015.006.30456 and earlier have a ntlm sso hash theft vulnerability. Successful exploitation could lead to information disclosure.

References

BugTraq: 105907

CVE: CVE-2018-15979

URL: https://blog.edgespot.io/2018/11/the-case-of-unpatched-variant-of-pdf.html

Short Name

HTTP:STC:ADOBE:CVE-2018-15979ID

Severity

Minor

Recommended

True

Recommended Action

Drop

HTTP: Adobe Acrobat and Reader PDF GoToE Information Disclosure

Extended Description

References

Found a potential security threat?