medium6.5
CVE-2017-11232
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after f…
Impact
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability when processing Enhanced Metafile Format (EMF) data related to brush manipulation. Successful exploitation could lead to arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Acrobat | from 11.0.0 through 11.0.20 from 17.011.00000 through 17.011.30066 |
| Adobe | Acrobat Dc | from 15.006.30060 through 15.006.30306 from 15.007.20033 through 17.009.20058 |
| Adobe | Acrobat Reader | from 17.011.00000 through 17.011.30066 |
| Adobe | Acrobat Reader Dc | from 15.006.30060 through 15.006.30306 from 15.007.20033 through 17.009.20058 |
| Adobe | Reader | from 11.0.0 through 11.0.20 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/100185
- http://www.securitytracker.com/id/1039098
- https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
- http://www.securityfocus.com/bid/100185
- http://www.securitytracker.com/id/1039098
- https://helpx.adobe.com/security/products/acrobat/apsb17-24.html