CVEvulnerability

CVE-2017-11236

6.5 MEDIUM Published 2017-08-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-08-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-119

Description

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the internal handling of UTF-16 literal strings. Successful exploitation could lead to arbitrary code execution.

Affected configurations

• adobe acrobat (>= 11.0.0 <= 11.0.20) • adobe acrobat (>= 17.011.00000 <= 17.011.30066) • adobe acrobat dc (>= 15.006.30060 <= 15.006.30306) • adobe acrobat dc (>= 15.007.20033 <= 17.009.20058) • adobe acrobat reader (>= 17.011.00000 <= 17.011.30066) • adobe acrobat reader dc (>= 15.006.30060 <= 15.006.30306) • adobe acrobat reader dc (>= 15.007.20033 <= 17.009.20058) • adobe reader (>= 11.0.0 <= 11.0.20)

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References