CVE-2017-11232
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability when processing Enhanced Metafile Format (EMF) data related to brush manipulation. Successful exploitation could lead to arbitrary code execution.
- Score
- CVSS 3.0 6.5 Medium
- Status
- Modified - psirt@adobe.com
- Published
- 2017-08-11
- Last modified
- 2024-09-16
- Weaknesses
- CWE-200, CWE-416
Affected products
- Acrobat (Adobe)
- Acrobat Dc (Adobe)
- Acrobat Reader (Adobe)
- Acrobat Reader Dc (Adobe)
- Reader (Adobe)
- Acrobat Reader (Adobe Systems Incorporated)
References
- http://www.securityfocus.com/bid/100185
- http://www.securitytracker.com/id/1039098
- https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
