Buffer Access Vulnerability in Adobe Acrobat and Reader Affecting Multiple Versions
CVE-2017-16381

8.8HIGH

Key Information:

Vendor: Adobe
Status: Adobe Acrobat Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions
Vendor: CVE Published:; 9 December 2017

What is CVE-2017-16381?

This vulnerability in Adobe Acrobat and Reader allows attackers to execute arbitrary code through a crafted TIFF image embedded in an XPS document. Affected versions exhibit improper handling of buffer lengths, leading to discrepancies between the allocated buffer size and the required access. An attacker exploiting this issue can gain control of accessible memory, posing a significant security risk.

Affected Version(s)

Adobe Acrobat Reader 2017.012.20098 and earlier , 2017.011.30066 and earlier , 2015.006.30355 and earlier , 11.0.22 and earlier Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions