CVE-2017-11293

CRITICAL

Adobe Acrobat and Reader Memory Corruption RCE (<=11.0.22, <=15.006.30355, <=17.012.20098)

Title source: llm

Description

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution.

References (4)

Core 4

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1039791

Broken Link x_refsource_confirm

https://helpx.adobe.com/security/products/acrobat/aspb17-36.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/102140

Vendor Advisory

https://helpx.adobe.com/security/products/acrobat/apsb17-36.html

Scores

CVSS v3 9.8

EPSS 0.0909

EPSS Percentile 94.7%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-119

Status published

Products (7)

adobe/acrobat < 11.0.22

adobe/acrobat_dc - - 17.012.20098

adobe/acrobat_dc 15.0 - 15.006.30355

adobe/acrobat_reader < 11.0.22

adobe/acrobat_reader_dc - - 17.012.20098

adobe/acrobat_reader_dc 15.0 - 15.006.30355

n/a/Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.

Published Dec 09, 2017

Tracked Since Feb 18, 2026