Buffer Overflow Vulnerability in Adobe Acrobat and Reader
CVE-2017-16386

8.8HIGH

Key Information:

Vendor: Adobe
Status: Adobe Acrobat Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions
Vendor: CVE Published:; 9 December 2017

Summary

Adobe Acrobat and Reader versions up to 2017.012.20098 are affected by a vulnerability that allows improper memory access through an invalid pointer offset during the XPS2PDF conversion. This flaw can potentially expose sensitive user data, resulting from a computation that incorrectly reads beyond the target buffer's end. Attackers exploiting this vulnerability can gain access to confidential information, raising significant security concerns for affected users.

Affected Version(s)

Adobe Acrobat Reader 2017.012.20098 and earlier , 2017.011.30066 and earlier , 2015.006.30355 and earlier , 11.0.22 and earlier Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions