Buffer Overflow Vulnerability in Adobe Acrobat and Reader
CVE-2017-16415

8.8HIGH

What is CVE-2017-16415?

A vulnerability exists in Adobe Acrobat and Reader that stems from improper handling of font encodings, leading to a buffer overflow condition. This occurs when a computation writes data beyond the allocated memory, which can result in the potential corruption of sensitive information or allow an attacker to execute arbitrary code within the application context. The issue affects several versions, making it crucial for users to ensure their software is updated to mitigate risks associated with this vulnerability.

Affected Version(s)

Adobe Acrobat Reader 2017.012.20098 and earlier , 2017.011.30066 and earlier , 2015.006.30355 and earlier , 11.0.22 and earlier Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions

References

EPSS Score

11% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.