Use-After-Free Vulnerability in Adobe Acrobat Reader's XFA Engine
CVE-2017-2951

7.8HIGH

Key Information:

Vendor: Adobe
Status: Adobe Acrobat Reader 15.020.20042 And Earlier, 15.006.30244 And Earlier, 11.0.18 And Earlier.
Vendor: CVE Published:; 11 January 2017

What is CVE-2017-2951?

A significant use-after-free vulnerability exists within the XFA engine of Adobe Acrobat Reader, specifically affecting how sub-form functionality is handled. If successfully exploited, this vulnerability may allow attackers to execute arbitrary code on the host system, potentially leading to unauthorized access and control over the affected applications. It is crucial for users and administrators to update their software to mitigate such risks, as exploiting this vulnerability can have serious security implications.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Adobe Acrobat Reader 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier. Adobe Acrobat Reader 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier.