Buffer Over-Read Flaw in Adobe Acrobat and Reader Affects Multiple Versions
CVE-2017-16363

8.8HIGH

Key Information:

Vendor: Adobe
Status: Adobe Acrobat Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions
Vendor: CVE Published:; 9 December 2017

Summary

A buffer over-read vulnerability has been identified in Adobe Acrobat and Reader, where invalid input can lead to memory access beyond allocated buffers. This flaw arises when the software processes character codes, allowing an attacker to craft an input that can potentially reveal sensitive information, such as memory addresses from the object heap. This could enable further exploitation or information leakage, thus creating a significant security risk for users relying on these applications.

Affected Version(s)

Adobe Acrobat Reader 2017.012.20098 and earlier , 2017.011.30066 and earlier , 2015.006.30355 and earlier , 11.0.22 and earlier Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions