CVE-2017-16398 An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. Th...
CriticalCVSS 9.8
EPSS 9.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript engine. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe acrobat | <= 11.0.22 | No fix listed |
| Adobe acrobat | >= 17.0, <= 17.011.30066 | No fix listed |
| Adobe Acrobat DC | >= -, <= 17.012.20098 | No fix listed |
| Adobe Acrobat DC | >= 15.0, <= 15.006.30355 | No fix listed |
| Adobe Acrobat Reader | <= 11.0.22 | No fix listed |
| Adobe Acrobat Reader | >= 17.0, <= 17.011.30066 | No fix listed |
| Adobe Acrobat Reader DC | >= -, <= 17.012.20098 | No fix listed |
| Adobe Acrobat Reader DC | >= 15.0, <= 15.006.30355 | No fix listed |
References
- 101818 third-party-advisory vdb-entry
- 1039791 third-party-advisory vdb-entry
- helpx.adobe.com vendor-advisory