Buffer Over-Read Vulnerability in Adobe Acrobat and Reader Products
CVE-2017-16384

8.8HIGH

Key Information:

Vendor: Adobe
Status: Adobe Acrobat Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions
Vendor: CVE Published:; 9 December 2017

Summary

A vulnerability exists in Adobe Acrobat and Reader due to a buffer over-read during the exif processing of PNG files when converting to XPS format. This flaw can lead to the disclosure of sensitive information, including memory addresses that may give attackers insights into the application's internal structures. By exploiting this vulnerability with specially crafted input, an attacker could potentially gain unauthorized access to confidential data.

Affected Version(s)

Adobe Acrobat Reader 2017.012.20098 and earlier , 2017.011.30066 and earlier , 2015.006.30355 and earlier , 11.0.22 and earlier Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions