Heap Overflow Vulnerability in Adobe Acrobat Reader
CVE-2017-2949

7.8HIGH

Key Information:

Vendor: Adobe
Status: Adobe Acrobat Reader 15.020.20042 And Earlier, 15.006.30244 And Earlier, 11.0.18 And Earlier.
Vendor: CVE Published:; 11 January 2017

Summary

Adobe Acrobat Reader contains a heap overflow vulnerability located in its XSLT engine. This flaw allows attackers to exploit the application, potentially leading to arbitrary code execution. By manipulating specially crafted XSLT files, an attacker can gain unauthorized access to a victim's system. Users are advised to update their Adobe Acrobat Reader to mitigate the risks related to this flaw.

Affected Version(s)

Adobe Acrobat Reader 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier. Adobe Acrobat Reader 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier.