PT-2017-1855 · Adobe · Reader+4
Publicado
2017-04-06
·
Atualizado
2017-07-11
·
CVE-2017-3021
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier
Adobe Acrobat (affected versions not specified)
Adobe Reader (affected versions not specified)
Adobe Acrobat Document Cloud (affected versions not specified)
Adobe Reader Document Cloud (affected versions not specified)
Description
The issue is related to a memory leak in the JPEG 2000 parser engine of Adobe products, including Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud. This can be exploited by a remote attacker to cause a denial of service. The vulnerability is also described as a memory corruption issue that allows attackers to cause a memory leak.
Recommendations
For Adobe Acrobat Reader versions 11.0.19 and earlier, update to a version later than 11.0.19 to resolve the issue.
For Adobe Acrobat Reader versions 15.006.30280 and earlier, update to a version later than 15.006.30280 to resolve the issue.
For Adobe Acrobat Reader versions 15.023.20070 and earlier, update to a version later than 15.023.20070 to resolve the issue.
For Adobe Acrobat, Adobe Reader, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Acrobat
Acrobat Document Cloud
Acrobat Reader
Reader
Reader Document Cloud