CVE-2017-3113
High
Description
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in JavaScript engine when creating large strings. Successful exploitation could lead to arbitrary code execution.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Adobe Acrobat
PublishedAug 11, 2017
First seenAug 11, 2017
How to fix
Update
- adobe acrobat11.0.21 or later
- adobe acrobat_dc15.006.30355, 17.012.20098 or later
- adobe acrobat_reader_dc15.006.30355, 17.011.30066, 17.012.20098 or later
- adobe reader11.0.21 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| adobe acrobat | 11.0.0 ≤ v < 11.0.21 | 11.0.21 |
| adobe acrobat_dc | 15.000.0000 ≤ v < 15.006.30355, 17.000.0000 ≤ v ≤ 17.011.30066, 17.000.0000 ≤ v < 17.012.20098 | 15.006.30355, 17.012.20098 |
| adobe acrobat_reader_dc | 15.000.0000 ≤ v < 15.006.30355, 17.000.0000 ≤ v < 17.011.30066, 17.000.0000 ≤ v < 17.012.20098 | 15.006.30355, 17.011.30066, 17.012.20098 |
| adobe reader | 11.0.0 ≤ v < 11.0.21 | 11.0.21 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.