Untrusted Pointer Dereference in Adobe Acrobat and Reader
CVE-2017-16371

8.8HIGH

Key Information:

Vendor: Adobe
Status: Adobe Acrobat Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions
Vendor: CVE Published:; 9 December 2017

Summary

A vulnerability in Adobe Acrobat and Reader arises from an untrusted pointer dereference within the JavaScript engine, which can occur when specifically crafted input leads to the computation of pointers to unauthorized memory locations. This flaw allows an attacker to exploit the read-dereferencing operation, potentially exposing sensitive data from memory, creating significant privacy and security risks for users.

Affected Version(s)

Adobe Acrobat Reader 2017.012.20098 and earlier , 2017.011.30066 and earlier , 2015.006.30355 and earlier , 11.0.22 and earlier Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions