Heap Overflow Vulnerability in Adobe Acrobat Reader Affecting Multiple Versions
CVE-2017-2970
7.8HIGH
Key Information:
- Vendor
Adobe
- Vendor
- CVE Published:
- 24 January 2017
What is CVE-2017-2970?
A vulnerability exists in Adobe Acrobat Reader due to a heap overflow in the XSLT engine related to template manipulation. If successfully exploited, an attacker could execute arbitrary code on the affected system by crafting a malicious XML file. This vulnerability poses significant risks as it may allow for unauthorized access to system resources, potentially enabling broader attacks.
Affected Version(s)
Adobe Acrobat Reader 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier. Adobe Acrobat Reader 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier.