CVEs-PoC/2018/CVE-2018-12866.md

### [CVE-2018-12866](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12866)
![](https://img.shields.io/static/v1?label=Product&message=Adobe%20Acrobat%20and%20Reader&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=2018.011.20063%20and%20earlier%2C%202017.011.30102%20and%20earlier%2C%20and%202015.006.30452%20and%20earlier%20versions%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Out-of-bounds%20read&color=brightgreen)

### Description

Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

### POC

#### Reference
- https://research.checkpoint.com/2018/50-adobe-cves-in-50-days/

#### Github
- https://github.com/ARPSyndicate/cve-scores
- https://github.com/ARPSyndicate/cvemon
- https://github.com/DanielEbert/winafl
- https://github.com/Team-BT5/WinAFL-RDP
- https://github.com/bacon-tomato-spaghetti/WinAFL-RDP
- https://github.com/chaojianhu/winafl-intelpt
- https://github.com/googleprojectzero/winafl
- https://github.com/hardik05/winafl-powermopt
- https://github.com/pranav0408/WinAFL
- https://github.com/s0i37/winafl_inmemory
- https://github.com/ssumachai/CS182-Project
- https://github.com/yrime/WinAflCustomMutate