CVE-2017-2962 — Incorrect Type Conversion or Cast in Adobe Acrobat

CWE-704 — Incorrect Type Conversion or Cast4 documents4 sources
Severity
7.8HIGHNVD
EPSS
5.5%
top 9.77%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Adobe AcrobatAdobe Acrobat DCAdobe Acrobat Reader DC+1 more
Timeline
PublishedJan 11
Latest updateMay 17

Description

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable type confusion vulnerability in the XSLT engine related to localization functionality. Successful exploitation could lead to arbitrary code execution.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages4 packages

▶NVDadobe/acrobat_reader_dc15.006.30244+1
▶NVDadobe/reader11.0.18
▶NVDadobe/acrobat11.0.18
▶NVDadobe/acrobat_dc15.006.30244+1

Patches

Patch: helpx.adobe.com ↗Patch: helpx.adobe.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-pmq5-6qcv-88q4: Adobe Acrobat Reader versions 15↗2022-05-17
▶
CVEList
CVE-2017-2962: Adobe Acrobat Reader versions 15↗2017-01-11
▶

🔍Detection Rules

1
Suricata
ET HUNTING PDF Containing Subform with JavaScript↗2012-01-28
▶
CVE-2017-2962 — Incorrect Type Conversion or Cast | cvebase