CVE-2017-11295

CRITICAL

Adobe DNG Converter <= 9.12.1 - Memory Corruption

Title source: llm
STIX 2.1

Description

An issue was discovered in Adobe DNG Converter 9.12.1 and earlier versions. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/101828

Scores

CVSS v3 9.8
EPSS 0.0585
EPSS Percentile 92.3%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (2)
adobe/dng_converter < 9.12.1
n/a/Adobe DNG Converter 9.12.1 and earlier versions Adobe DNG Converter 9.12.1 and earlier versions
Published Dec 09, 2017
Tracked Since Feb 18, 2026