Adobe Acrobat and Reader Buffer Access Vulnerability
CVE-2017-16396
Key Information:
- Vendor
- Adobe
- Vendor
- CVE Published:
- 9 December 2017
Summary
A vulnerability exists in Adobe Acrobat and Reader due to improper buffer access in the TIFF processing module. This flaw allows crafted input to create a mismatch between the allocated buffer size and the actual memory access, potentially enabling an attacker to execute arbitrary code on the affected systems. It is crucial for users of all affected versions to apply security updates to mitigate risks associated with this vulnerability.
Affected Version(s)
Adobe Acrobat Reader 2017.012.20098 and earlier , 2017.011.30066 and earlier , 2015.006.30355 and earlier , 11.0.22 and earlier Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions
References
EPSS Score
27% chance of being exploited in the next 30 days.
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved