Use After Free Vulnerability in Adobe Acrobat Reader
CVE-2017-2957

7.8HIGH

Key Information:

Vendor: Adobe
Status: Adobe Acrobat Reader 15.020.20042 And Earlier, 15.006.30244 And Earlier, 11.0.18 And Earlier.
Vendor: CVE Published:; 11 January 2017

What is CVE-2017-2957?

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier are susceptible to a use after free vulnerability within the JavaScript engine. This flaw, related to the application’s collaboration functionality, may allow an attacker to execute arbitrary code on the affected system by exploiting the vulnerability. Users are advised to update to the latest version to mitigate the risks associated with this security issue.

Affected Version(s)

Adobe Acrobat Reader 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier. Adobe Acrobat Reader 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier.