CVE-2017-11232

MEDIUM

Adobe Acrobat < 11.0.20 - Information Disclosure

Title source: rule

Description

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability when processing Enhanced Metafile Format (EMF) data related to brush manipulation. Successful exploitation could lead to arbitrary code execution.

References (3)

Scores

CVSS v3 6.5
EPSS 0.1241
EPSS Percentile 93.8%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Classification

CWE
CWE-200 CWE-416
Status draft

Affected Products (7)

adobe/acrobat < 11.0.20
adobe/acrobat_dc < 15.006.30306
adobe/acrobat_dc < 17.009.20058
adobe/acrobat_reader < 17.011.30066
adobe/acrobat_reader_dc < 15.006.30306
adobe/acrobat_reader_dc < 17.009.20058
adobe/reader < 11.0.20

Timeline

Published Aug 11, 2017
Tracked Since Feb 18, 2026