Buffer Overflow Vulnerability in Adobe Acrobat and Reader
CVE-2017-16404

8.8HIGH

What is CVE-2017-16404?

A vulnerability has been identified in Adobe Acrobat and Reader that stems from a buffer overflow caused by improper processing of Enhanced Metafile Format Plus (EMF+). This flaw arises from an out of range pointer offset used to access sub-elements of an internal data structure, allowing potential attackers to exploit this issue. Successful exploitation could lead to sensitive data corruption or even execution of arbitrary code, presenting significant risks to users of affected software versions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Adobe Acrobat Reader 2017.012.20098 and earlier , 2017.011.30066 and earlier , 2015.006.30355 and earlier , 11.0.22 and earlier Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions

References

EPSS Score

14% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.