CVE-2017-3117
HIGHAdobe Acrobat and Reader < 11.0.21, 15.006.30355, 17.012.20098 - Heap Overflow via PDF Link Plugin
Title source: llmDescription
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable heap overflow vulnerability in the plugin that handles links within the PDF. Successful exploitation could lead to arbitrary code execution.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/100180
Patch, Vendor Advisory x_refsource_confirm
https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1039098
Scores
CVSS v3
8.8
EPSS
0.1889
EPSS Percentile
96.9%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-119
Status
published
Products (10)
adobe/acrobat
11.0.0 - 11.0.21
adobe/acrobat_dc
15.000.0000 - 15.006.30355
adobe/acrobat_dc
17.000.0000 - 17.012.20098
adobe/acrobat_reader_dc
15.000.0000 - 15.006.30355
adobe/acrobat_reader_dc
17.000.0000 - 17.012.20098
adobe/reader
11.0.0 - 11.0.21
Adobe Systems Incorporated/Acrobat Reader
11.0.20 and earlier
Adobe Systems Incorporated/Acrobat Reader
2015.006.30306 and earlier
Adobe Systems Incorporated/Acrobat Reader
2017.008.30051 and earlier
Adobe Systems Incorporated/Acrobat Reader
2017.009.20058 and earlier
Published
Aug 11, 2017
Tracked Since
Feb 18, 2026