Vulnerability CVE-2017-16366

Vulnerability CVE-2017-16366

Published: 2017-12-09

Description:

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a security bypass vulnerability in the AcroPDF plugin.

Type:

CWE-noinfo

CVSS2 => (AV:N/AC:L/Au:N/C:N/I:P/A:N)

CVSS Base Score	Impact Subscore	Exploitability Subscore
5/10	2.9/10	10/10

Exploit range	Attack complexity	Authentication
Remote	Low	No required
Confidentiality impact	Integrity impact	Availability impact
None	Partial	None

Affected software
Adobe -> Acrobat
Adobe -> Acrobat dc
Adobe -> Acrobat reader
Adobe -> Acrobat reader dc

References:

http://www.securityfocus.com/bid/101830

http://www.securitytracker.com/id/1039791

https://helpx.adobe.com/security/products/acrobat/apsb17-36.html

Copyright 2024, cxsecurity.com