Vulnerability CVE-2017-11308

Vulnerability CVE-2017-11308

Published: 2018-05-19

Description:

Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Type:

CWE-119

(Improper Restriction of Operations within the Bounds of a Memory Buffer)

CVSS2 => (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score	Impact Subscore	Exploitability Subscore
10/10	10/10	10/10

Exploit range	Attack complexity	Authentication
Remote	Low	No required
Confidentiality impact	Integrity impact	Availability impact
Complete	Complete	Complete

Affected software
Adobe -> Acrobat 2017
Adobe -> Acrobat dc
Adobe -> Acrobat reader 2017
Adobe -> Acrobat reader dc
Adobe -> Acrobat xi
Adobe -> Reader xi

References:

https://helpx.adobe.com/security/products/acrobat/apsb17-36.html

Copyright 2024, cxsecurity.com