CVE-2017-3012

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading (DLL hijacking) vulnerability in the OCR plugin.

Score

CVSS 3.0 7.8 High

Status

Modified - psirt@adobe.com

Published

2017-04-12

Last modified

2024-08-05

Weaknesses

CWE-427

Affected products

• Acrobat (Adobe)
• Acrobat Dc (Adobe)
• Acrobat Reader Dc (Adobe)
• Reader (Adobe)

References

• http://www.securityfocus.com/bid/97547
• http://www.securitytracker.com/id/1038228
• https://helpx.adobe.com/security/products/acrobat/apsb17-11.html