CVE-2017-3115 — Sensitive Information Exposure in Adobe Acrobat

CWE-200 — Sensitive Information Exposure4 documents4 sources
Severity
6.5MEDIUMNVD
EPSS
7.1%
top 8.48%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Adobe AcrobatAdobe Acrobat DCAdobe Acrobat Reader DC+2 more
Timeline
PublishedAug 11
Latest updateMay 14

Description

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an information disclosure vulnerability when handling links in a PDF document.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages5 packages

▶NVDadobe/acrobat_reader_dc15.000.0000 — 15.006.30355+2
▶NVDadobe/reader11.0.0 — 11.0.21
▶NVDadobe/acrobat11.0.0 — 11.0.21
▶NVDadobe/acrobat_dc15.000.0000 — 15.006.30355+2

Patches

Patch: helpx.adobe.com ↗Patch: helpx.adobe.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-j522-hxwc-xqf4: Adobe Acrobat Reader 2017↗2022-05-14
▶
CVEList
CVE-2017-3115: Adobe Acrobat Reader 2017↗2017-08-11
▶

💬Community

1
Bugzilla
CVE-2016-5725 jsch: ChannelSftp path traversal vulnerability↗2016-09-14
▶
CVE-2017-3115 — Sensitive Information Exposure in Adobe | cvebase