CVE-2017-16397
Description
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is a part of Enhanced Metafile Format (EMF) processing within the image conversion module. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| adobe acrobat | v ≤ 11.0.22, 17.0 ≤ v ≤ 17.011.30066 | — |
| adobe acrobat_dc | - ≤ v ≤ 17.012.20098, 15.0 ≤ v ≤ 15.006.30355 | — |
| adobe acrobat_reader | v ≤ 11.0.22, 17.0 ≤ v ≤ 17.011.30066 | — |
| adobe acrobat_reader_dc | - ≤ v ≤ 17.012.20098, 15.0 ≤ v ≤ 15.006.30355 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.