CVE-2017-11221
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable type confusion vulnerability in the annotation functionality. Successful exploitation could lead to arbitrary code execution.
- Score
- CVSS 3.0 8.8 High
- Status
- Modified - psirt@adobe.com
- Published
- 2017-08-11
- Last modified
- 2024-09-16
- Weaknesses
- CWE-704
Affected products
- Acrobat (Adobe)
- Acrobat Dc (Adobe)
- Acrobat Reader (Adobe)
- Acrobat Reader Dc (Adobe)
- Reader (Adobe)
- Acrobat Reader (Adobe Systems Incorporated)
References
- http://www.securityfocus.com/bid/100181
- http://www.securitytracker.com/id/1039098
- https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
