CVE-2017-11219

CWE-416 — Use After Free3 documents3 sources
Severity
8.8HIGH
EPSS
5.1%
top 10.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Adobe AcrobatAdobe Acrobat DCAdobe Acrobat Reader+3 more
Timeline
PublishedAug 11
Latest updateMay 14

Description

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the XFA rendering engine. Successful exploitation could lead to arbitrary code execution.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages6 packages

▶NVDadobe/acrobat_reader17.011.00000 — 17.011.30066
▶NVDadobe/acrobat_reader_dc15.006.30060 — 15.006.30306+1
▶NVDadobe/reader11.0.0 — 11.0.20
▶NVDadobe/acrobat11.0.0 — 11.0.20+1

Patches

Patch: helpx.adobe.com ↗Patch: helpx.adobe.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-39vm-79j4-vj85: Adobe Acrobat Reader 2017↗2022-05-14
▶
CVEList
CVE-2017-11219: Adobe Acrobat Reader 2017↗2017-08-11
▶
CVE-2017-11219 (HIGH CVSS 8.8) | Adobe Acrobat Reader 2017.009.20058 | cvebase.io