Description
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable type confusion vulnerability in the XFA layout engine. Successful exploitation could lead to arbitrary code execution.
References (3)
Core 3
Core References
Patch, Vendor Advisory x_refsource_confirm
https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/100181
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1039098
Scores
CVSS v3
8.8
EPSS
0.0842
EPSS Percentile
94.3%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-704
Status
published
Products (11)
adobe/acrobat
11.0.0 - 11.0.20
adobe/acrobat_dc
15.006.30060 - 15.006.30306
adobe/acrobat_dc
15.007.20033 - 17.009.20058
adobe/acrobat_reader
17.011.00000 - 17.011.30066
adobe/acrobat_reader_dc
15.006.30060 - 15.006.30306
adobe/acrobat_reader_dc
15.007.20033 - 17.009.20058
adobe/reader
11.0.0 - 11.0.20
Adobe Systems Incorporated/Acrobat Reader
11.0.20 and earlier
Adobe Systems Incorporated/Acrobat Reader
2015.006.30306 and earlier
Adobe Systems Incorporated/Acrobat Reader
2017.008.30051 and earlier
... and 1 more
Published
Aug 11, 2017
Tracked Since
Feb 18, 2026