CVE-2017-11308 Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable heap overflow vulnerability. Successful ex...
CriticalCVSS 9.8
EPSS 8.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe acrobat | >= 11.0.0, <= 11.0.22 | No fix listed |
| Adobe acrobat | >= 17.011.30066, < 17.011.30068 | 17.011.30068 |
| Adobe Acrobat DC | >= 15.006.30355, < 15.006.30392 | 15.006.30392 |
| Adobe Acrobat DC | >= 17.012.20098, < 18.009.20044 | 18.009.20044 |
| Adobe Acrobat Reader | >= 11.0.0, <= 11.0.22 | No fix listed |
| Adobe Acrobat Reader | >= 17.011.30066, < 17.011.30068 | 17.011.30068 |
| Adobe Acrobat Reader DC | >= 15.006.30355, < 15.006.30392 | 15.006.30392 |
| Adobe Acrobat Reader DC | >= 17.012.20098, < 18.009.20044 | 18.009.20044 |
References
- helpx.adobe.com vendor-advisory