CVE-2017-3009 — Out-of-bounds Read in Adobe Acrobat

CWE-125 — Out-of-bounds Read3 documents3 sources
Severity
7.5HIGHNVD
EPSS
1.9%
top 16.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Adobe AcrobatAdobe Acrobat DCAdobe Acrobat Reader DC+1 more
Timeline
PublishedMar 31
Latest updateMay 13

Description

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable buffer overflow vulnerability in the JPEG2000 parser. Successful exploitation could lead to information disclosure.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages4 packages

▶NVDadobe/acrobat_reader_dc15.000.0000 — 15.006.30244+1
▶NVDadobe/reader11.0.0 — 11.0.18
▶NVDadobe/acrobat11.0.0 — 11.0.18
▶NVDadobe/acrobat_dc15.000.0000 — 15.006.30244+1

🔴Vulnerability Details

2
GHSA
GHSA-9fm7-248m-m6p5: Adobe Acrobat Reader versions 15↗2022-05-13
▶
CVEList
CVE-2017-3009: Adobe Acrobat Reader versions 15↗2017-03-31
▶
CVE-2017-3009 — Out-of-bounds Read in Adobe Acrobat | cvebase