PT-2017-2640 · Adobe+2 · Reader+7

Published 2017-08-08 · Updated 2019-10-03 · CVE-2017-8691

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions (affected versions not specified) Adobe Acrobat Document Cloud versions (affected versions not specified) Foxit Reader versions (affected versions not specified) Adobe Reader Document Cloud versions (affected versions not specified) Adobe Reader versions (affected versions not specified) Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1

Description The issue is caused by a buffer overflow in memory due to the improper handling of PCX files by the syntax analysis module in PDF editing and viewing software. This can allow a remote attacker to execute arbitrary code on a target system. The vulnerability can be exploited when the Windows font library fails to properly handle specially crafted embedded fonts.

Recommendations For Adobe Acrobat, update to a version that fixes the buffer overflow issue in the PCX file syntax analysis module. For Adobe Acrobat Document Cloud, update to a version that fixes the buffer overflow issue in the PCX file syntax analysis module. For Foxit Reader, update to a version that fixes the buffer overflow issue in the PCX file syntax analysis module. For Adobe Reader Document Cloud, update to a version that fixes the buffer overflow issue in the PCX file syntax analysis module. For Adobe Reader, update to a version that fixes the buffer overflow issue in the PCX file syntax analysis module. For Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1, apply the necessary patch to fix the Windows font library's handling of embedded fonts. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Buffer Overflow

Weakness Enumeration

CWE-19

CWE-119

Related Identifiers

BDU:2017-01867

CVE-2017-8691

Affected Products

Acrobat

Acrobat Document Cloud

Reader

Reader Document Cloud

Foxit Reader

Windows

Windows 7

Windows Server 2008

References · 9

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8691 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8691 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-8691 · Security Note
• https://bdu.fstec.ru/vul/2017-01867 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2017-8691 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-8691 · Vendor Advisory
• http://securityfocus.com/bid/100090 · Note
• https://fortiguard.com/zeroday/FG-VD-17-142 · Note
• http://securitytracker.com/id/1039096 · Note