CVE-2017-3013

HIGH

Adobe Acrobat < 11.0.19 - Uncontrolled Search Path

Title source: rule

Description

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading (DLL hijacking) vulnerability in a DLL related to remote logging.

Scores

CVSS v3 7.8
EPSS 0.0195
EPSS Percentile 83.3%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Classification

CWE
CWE-427
Status draft

Affected Products (6)

adobe/acrobat < 11.0.19
adobe/acrobat_dc < 15.006.30280
adobe/acrobat_dc < 15.023.20070
adobe/acrobat_reader_dc < 15.006.30280
adobe/acrobat_reader_dc < 15.023.20070
adobe/reader < 11.0.19

Timeline

Published Apr 12, 2017
Tracked Since Feb 18, 2026