CVE-2017-11228
published 2017-08-11CVE-2017-11228: Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory…
PriorityP349high8.8CVSS 3.0
AVNACLPRNUIRSUCHIHAH
EPSS
7.07%
93.5th percentile
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing JPEG 2000 (JP2) code stream data. Successful exploitation could lead to arbitrary code execution.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | acrobat | 11.0.0 – 11.0.20 | — |
| adobe | acrobat | 17.011.00000 – 17.011.30066 | — |
| adobe | acrobat_dc | 15.006.30060 – 15.006.30306 | — |
| adobe | acrobat_dc | 15.007.20033 – 17.009.20058 | — |
| adobe | acrobat_reader | 17.011.00000 – 17.011.30066 | — |
| adobe | acrobat_reader_dc | 15.006.30060 – 15.006.30306 | — |
| adobe | acrobat_reader_dc | 15.007.20033 – 17.009.20058 | — |
| adobe | reader | 11.0.0 – 11.0.20 | — |
| adobe_systems_incorporated | acrobat_reader | — | — |
| adobe_systems_incorporated | acrobat_reader | — | — |
| adobe_systems_incorporated | acrobat_reader | — | — |
| adobe_systems_incorporated | acrobat_reader | — | — |
CVSS provenance
nvdv3.08.8HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
Securelist
APT trends report Q3 2022
blogs_securelist·2022-11-01
APT trends report Q3 2022
Table of Contents
- The most remarkable findings
- Russian-speaking activity
- Chinese-speaking activity
- Middle East
- Southeast Asia and Korean Peninsula
- Other interesting discoveries
- Final thoughts
Authors
- GReAT
For more than five years, the Global Research and Analysis Team (GReAT) at Kaspersky has been publishing quarterly summaries of advanced persistent threat (APT) activity. These summaries are based on our threat intelligence research; and they provide a representative snapshot of what we have published and discussed in greater detail in our private APT reports. They are designed to highlight the significant events and findings that we feel people should be aware of.
This is our latest installment, focusing on activities that we observed during Q3 2022.
Readers who w
Securelist
APT trends report Q3 2022
blogs_securelist·2022-11-01
APT trends report Q3 2022
Table of Contents
The most remarkable findings
Russian-speaking activity
Chinese-speaking activity
Middle East
Southeast Asia and Korean Peninsula
Other interesting discoveries
Final thoughts
Authors
GReAT
For more than five years, the Global Research and Analysis Team (GReAT) at Kaspersky has been publishing quarterly summaries of advanced persistent threat (APT) activity. These summaries are based on our threat intelligence research; and they provide a representative snapshot of what we have published and discussed in greater detail in our private APT reports. They are designed to highlight the significant events and findings that we feel people should be aware of.
This is our latest installment, focusing on activities that we observed during Q3 2022.
Readers who would like t
2017-08-11
Published