CVE-2017-3013

HIGH

Adobe Acrobat Reader <= 11.0.19, <= 15.006.30280, <= 15.023.20070 - DLL Hijacking via Insecure Library Loading

Title source: llm
STIX 2.1

Description

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading (DLL hijacking) vulnerability in a DLL related to remote logging.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1038228
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/97547

Scores

CVSS v3 7.8
EPSS 0.0341
EPSS Percentile 87.3%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-427
Status published
Products (7)
adobe/acrobat < 11.0.19
adobe/acrobat_dc < 15.006.30280
adobe/acrobat_dc < 15.023.20070
adobe/acrobat_reader_dc < 15.006.30280
adobe/acrobat_reader_dc < 15.023.20070
adobe/reader < 11.0.19
n/a/Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier. Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier.
Published Apr 12, 2017
Tracked Since Feb 18, 2026