CVE-2017-11308

published 2018-05-19

CVE-2017-11308: Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
adobe	acrobat	11.0.0 – 11.0.22	—
adobe	acrobat	>= 17.011.30066 < 17.011.30068	17.011.30068
adobe	acrobat_dc	>= 15.006.30355 < 15.006.30392	15.006.30392
adobe	acrobat_dc	>= 17.012.20098 < 18.009.20044	18.009.20044
adobe	acrobat_reader	11.0.0 – 11.0.22	—
adobe	acrobat_reader	>= 17.011.30066 < 17.011.30068	17.011.30068
adobe	acrobat_reader_dc	>= 15.006.30355 < 15.006.30392	15.006.30392
adobe	acrobat_reader_dc	>= 17.012.20098 < 18.009.20044	18.009.20044

CWE-787