CVE-2017-11235
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the image conversion engine when decompressing JPEG data. Successful exploitation could lead to arbitrary code execution.
- Score
- CVSS 3.0 8.8 High
- Status
- Modified - psirt@adobe.com
- Published
- 2017-08-11
- Last modified
- 2024-09-17
- Weaknesses
- CWE-416
Affected products
- Acrobat (Adobe)
- Acrobat Dc (Adobe)
- Acrobat Reader (Adobe)
- Acrobat Reader Dc (Adobe)
- Reader (Adobe)
- Acrobat Reader (Adobe Systems Incorporated)
References
- http://www.securityfocus.com/bid/100182
- http://www.securitytracker.com/id/1039098
- https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
