CVE-2017-11240 Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable out-of-bounds read vulnerability. Successf...
CriticalCVSS 9.8
EPSS 6.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe acrobat | >= 11.0.0, <= 11.0.22 | No fix listed |
| Adobe Acrobat DC | >= 15.006.30355, < 15.006.30392 | 15.006.30392 |
| Adobe Acrobat DC | >= 17.012.20098, < 18.009.20044 | 18.009.20044 |
| Adobe Acrobat Reader | >= 11.0.0, <= 11.0.22 | No fix listed |
| Adobe Acrobat Reader DC | >= 15.006.30355, < 15.006.30392 | 15.006.30392 |
| Adobe Acrobat Reader DC | >= 17.012.20098, < 18.009.20044 | 18.009.20044 |
References
- helpx.adobe.com vendor-advisory