CVE-2017-11271

HIGH

Adobe Acrobat < 11.0.20 - Memory Corruption

Title source: rule

Description

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to transfer of pixel blocks. Successful exploitation could lead to arbitrary code execution.

References (3)

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/100179

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1039098

[Patch, Vendor Advisory] https://helpx.adobe.com/security/products/acrobat/apsb17-24.html

Scores

CVSS v3 8.8

EPSS 0.0793

EPSS Percentile 91.9%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Classification

CWE

CWE-119

Status draft

Affected Products (7)

adobe/acrobat < 11.0.20

adobe/acrobat_dc < 15.006.30306

adobe/acrobat_dc < 17.009.20058

adobe/acrobat_reader < 17.011.30066

adobe/acrobat_reader_dc < 15.006.30306

adobe/acrobat_reader_dc < 17.009.20058

adobe/reader < 11.0.20

Timeline

Published Aug 11, 2017

Tracked Since Feb 18, 2026