CVE-2017-3012

HIGH

Adobe Acrobat and Reader < 11.0.19, < 15.006.30280, < 15.023.20070 - DLL Hijacking in OCR Plugin

Title source: llm
STIX 2.1

Description

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading (DLL hijacking) vulnerability in the OCR plugin.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1038228
Third Party Advisory, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/97547

Scores

CVSS v3 7.8
EPSS 0.0282
EPSS Percentile 84.7%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-427
Status published
Products (7)
adobe/acrobat < 11.0.19
adobe/acrobat_dc < 15.006.30280
adobe/acrobat_dc < 15.023.20070
adobe/acrobat_reader_dc < 15.006.30280
adobe/acrobat_reader_dc < 15.023.20070
adobe/reader < 11.0.19
n/a/Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier. Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier.
Published Apr 12, 2017
Tracked Since Feb 18, 2026