medium6.5
CVE-2017-11209
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corr…
Impact
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability that occurs when reading a JPEG file embedded within XML Paper Specification (XPS) file. Successful exploitation could lead to arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Acrobat | from 11.0.0 through 11.0.20 from 17.011.00000 through 17.011.30066 |
| Adobe | Acrobat Dc | from 15.006.30060 through 15.006.30306 from 15.007.20033 through 17.009.20058 |
| Adobe | Acrobat Reader | from 17.011.00000 through 17.011.30066 |
| Adobe | Acrobat Reader Dc | from 15.006.30060 through 15.006.30306 from 15.007.20033 through 17.009.20058 |
| Adobe | Reader | from 11.0.0 through 11.0.20 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/100184
- http://www.securitytracker.com/id/1039098
- https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
- http://www.zerodayinitiative.com/advisories/ZDI-17-577/
- http://www.securityfocus.com/bid/100184
- http://www.securitytracker.com/id/1039098
- https://helpx.adobe.com/security/products/acrobat/apsb17-24.html