PT-2017-2669 · Adobe+1 · Acrobat+2
Publicado
2017-08-08
·
Atualizado
2019-03-14
·
CVE-2017-11211
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Adobe Acrobat versions prior to 2017.009.20058
Adobe Acrobat versions prior to 2017.008.30051
Adobe Acrobat versions prior to 2015.006.30306
Adobe Acrobat versions prior to 11.0.20
Adobe Reader versions prior to 2017.009.20058
Adobe Reader versions prior to 2017.008.30051
Adobe Reader versions prior to 2015.006.30306
Adobe Reader versions prior to 11.0.20
Foxit Reader (affected versions not specified)
Description
The issue is caused by a heap overflow in the JPEG parser, allowing a remote attacker to execute arbitrary code. This can be achieved by exploiting the vulnerability in the JPEG parsing component of the affected software.
Recommendations
For Adobe Acrobat versions prior to 2017.009.20058, update to a version later than 2017.009.20058 to resolve the issue.
For Adobe Acrobat versions prior to 2017.008.30051, update to a version later than 2017.008.30051 to resolve the issue.
For Adobe Acrobat versions prior to 2015.006.30306, update to a version later than 2015.006.30306 to resolve the issue.
For Adobe Acrobat versions prior to 11.0.20, update to a version later than 11.0.20 to resolve the issue.
For Adobe Reader versions prior to 2017.009.20058, update to a version later than 2017.009.20058 to resolve the issue.
For Adobe Reader versions prior to 2017.008.30051, update to a version later than 2017.008.30051 to resolve the issue.
For Adobe Reader versions prior to 2015.006.30306, update to a version later than 2015.006.30306 to resolve the issue.
For Adobe Reader versions prior to 11.0.20, update to a version later than 11.0.20 to resolve the issue.
For Foxit Reader, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Acrobat
Reader
Foxit Reader