CVE-2017-3029

LOW

Adobe Acrobat and Reader Memory Address Leak via JPEG 2000 Code-Stream Handling

Title source: llm

Description

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability when handling a JPEG 2000 code-stream.

References (4)

Core 4

Core References

Third Party Advisory, VDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-17-255/

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/97554

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1038228

Vendor Advisory x_refsource_confirm

https://helpx.adobe.com/security/products/acrobat/apsb17-11.html

Scores

CVSS v3 3.3

EPSS 0.0280

EPSS Percentile 84.7%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Details

CWE

CWE-119

Status published

Products (7)

adobe/acrobat < 11.0.19

adobe/acrobat_dc < 15.006.30280

adobe/acrobat_dc < 15.023.20070

adobe/acrobat_reader_dc < 15.006.30280

adobe/acrobat_reader_dc < 15.023.20070

adobe/reader < 11.0.19

n/a/Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier. Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier.

Published Apr 12, 2017

Tracked Since Feb 18, 2026