Buffer Overflow in Adobe Acrobat and Reader JPEG Processing
CVE-2017-16392
Key Information:
- Vendor
Adobe
- Vendor
- CVE Published:
- 9 December 2017
What is CVE-2017-16392?
A buffer overflow vulnerability exists in Adobe Acrobat and Reader's JPEG processing module, where an improper length value during buffer access can lead to a mismatch between allocated buffer size and the memory access allowed. This issue potentially allows an attacker to exploit this flaw by manipulating JPEG file segment sizes, which could result in arbitrary code execution if the attacker has control over the memory accessed.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Adobe Acrobat Reader 2017.012.20098 and earlier , 2017.011.30066 and earlier , 2015.006.30355 and earlier , 11.0.22 and earlier Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions
References
EPSS Score
26% chance of being exploited in the next 30 days.
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved