Buffer Overflow in Adobe Acrobat and Reader JPEG Processing
CVE-2017-16392

8.8HIGH

Key Information:

Vendor: Adobe
Status: Adobe Acrobat Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions
Vendor: CVE Published:; 9 December 2017

Summary

A buffer overflow vulnerability exists in Adobe Acrobat and Reader's JPEG processing module, where an improper length value during buffer access can lead to a mismatch between allocated buffer size and the memory access allowed. This issue potentially allows an attacker to exploit this flaw by manipulating JPEG file segment sizes, which could result in arbitrary code execution if the attacker has control over the memory accessed.

Affected Version(s)

Adobe Acrobat Reader 2017.012.20098 and earlier , 2017.011.30066 and earlier , 2015.006.30355 and earlier , 11.0.22 and earlier Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions