Memory Address Leak Vulnerability in Adobe Acrobat Reader
CVE-2017-3021

3.3LOW

Key Information:

Vendor

Adobe
Status
Adobe Acrobat Reader 11.0.19 And Earlier, 15.006.30280 And Earlier, 15.023.20070 And Earlier.
Vendor
CVE Published:
12 April 2017

What is CVE-2017-3021?

Adobe Acrobat Reader is susceptible to a memory address leak vulnerability found within its JPEG 2000 parser. This issue affects various earlier versions of the software, allowing unauthorized access to sensitive memory contents, which could compromise the integrity of the application. Users of impacted versions should address this vulnerability to maintain the security of their documents and protect against potential exploitation.

Affected Version(s)

Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier. Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier.

References

http://www.securityfocus.com/bid/97554
vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1038228
vdb-entryx_refsource_SECTRACK
https://helpx.adobe.com/security/products/acrobat/apsb17-...
x_refsource_CONFIRM

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2017-3021 : Memory Address Leak Vulnerability in Adobe Acrobat Reader