PT-2017-1172 · Adobe · Acrobat+1

Published 2017-01-05 · Updated 2017-01-18 · CVE-2017-2947

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions prior to 15.020.20042 Adobe Acrobat versions prior to 15.006.30244 Adobe Acrobat versions prior to 11.0.18 Adobe Reader versions prior to 15.020.20042 Adobe Reader versions prior to 15.006.30244 Adobe Reader versions prior to 11.0.18

Description The issue is related to insufficient input validation, allowing a remote attacker to bypass security mechanisms by manipulating the Form Data Format (FDF). This can affect the system.

Recommendations For Adobe Acrobat versions prior to 15.020.20042, update to a version later than 15.020.20042. For Adobe Acrobat versions prior to 15.006.30244, update to a version later than 15.006.30244. For Adobe Acrobat versions prior to 11.0.18, update to a version later than 11.0.18. For Adobe Reader versions prior to 15.020.20042, update to a version later than 15.020.20042. For Adobe Reader versions prior to 15.006.30244, update to a version later than 15.006.30244. For Adobe Reader versions prior to 11.0.18, update to a version later than 11.0.18.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2017-00276

CVE-2017-2947

Affected Products

Acrobat

Reader

References · 7

• https://helpx.adobe.com/security/products/acrobat/apsb17-01.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-00276 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-2947 · Security Note
• https://osv.dev/vulnerability/CVE-2017-2947 · Vendor Advisory
• http://securityfocus.com/bid/95348 · Note
• http://securitytracker.com/id/1037574 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2947 · Note