CVE-2017-3054

HIGH

Adobe Acrobat < 11.0.19 - Memory Corruption

Title source: rule

Description

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to manipulation of EMF files. Successful exploitation could lead to arbitrary code execution.

References (3)

Scores

CVSS v3 7.8
EPSS 0.0192
EPSS Percentile 83.2%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Classification

CWE
CWE-119
Status draft

Affected Products (6)

adobe/acrobat < 11.0.19
adobe/acrobat_dc < 15.006.30280
adobe/acrobat_dc < 15.023.20070
adobe/acrobat_reader_dc < 15.006.30280
adobe/acrobat_reader_dc < 15.023.20070
adobe/reader < 11.0.19

Timeline

Published Apr 12, 2017
Tracked Since Feb 18, 2026