high8.8
CVE-2017-3113
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after f…
Impact
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in JavaScript engine when creating large strings. Successful exploitation could lead to arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Acrobat | from 11.0.0 before 11.0.21 |
| Adobe | Acrobat Dc | from 15.000.0000 before 15.006.30355 from 17.000.0000 through 17.011.30066 from 17.000.0000 before 17.012.20098 |
| Adobe | Acrobat Reader Dc | from 15.000.0000 before 15.006.30355 from 17.000.0000 before 17.011.30066 from 17.000.0000 before 17.012.20098 |
| Adobe | Reader | from 11.0.0 before 11.0.21 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/100182
- http://www.securitytracker.com/id/1039098
- https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
- http://www.securityfocus.com/bid/100182
- http://www.securitytracker.com/id/1039098
- https://helpx.adobe.com/security/products/acrobat/apsb17-24.html