Memory Corruption Vulnerability in Adobe Acrobat and Reader
CVE-2017-16420

8.8HIGH

Key Information:

Vendor: Adobe
Status: Adobe Acrobat Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions
Vendor: CVE Published:; 9 December 2017

Summary

A vulnerability has been identified in Adobe Acrobat and Reader due to improper handling of memory, which leads to potential sensitive data exposure. This issue arises from a computation that improperly reads data past the allocated buffer, specifically in the JavaScript engine responsible for annotation processing. Attackers can exploit this vulnerability by using an invalid pointer offset, directing access towards out-of-range fields in internal data structures, thereby exposing sensitive information to unauthorized users.

Affected Version(s)

Adobe Acrobat Reader 2017.012.20098 and earlier , 2017.011.30066 and earlier , 2015.006.30355 and earlier , 11.0.22 and earlier Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions