Memory Address Leak Vulnerability in Adobe Acrobat Reader
CVE-2017-3032

3.3LOW

Key Information:

Vendor

Adobe
Status
Adobe Acrobat Reader 11.0.19 And Earlier, 15.006.30280 And Earlier, 15.023.20070 And Earlier.
Vendor
CVE Published:
12 April 2017

What is CVE-2017-3032?

The vulnerability in Adobe Acrobat Reader resides within the JPEG 2000 code-stream parser, which can lead to potential memory address leaks. This flaw may allow an attacker to access sensitive information, posing a risk to user data and overall application integrity. Users of affected versions are advised to update their software to mitigate potential exposure.

Affected Version(s)

Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier. Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier.

References

http://www.securityfocus.com/bid/97554
vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1038228
vdb-entryx_refsource_SECTRACK
https://helpx.adobe.com/security/products/acrobat/apsb17-...
x_refsource_CONFIRM

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.