CVE-2017-3113
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in JavaScript engine when creating large strings. Successful exploitation could lead to arbitrary code execution.
- Score
- CVSS 3.0 8.8 High
- Status
- Modified - psirt@adobe.com
- Published
- 2017-08-11
- Last modified
- 2024-09-16
- Weaknesses
- CWE-416
Affected products
- Acrobat (Adobe)
- Acrobat Dc (Adobe)
- Acrobat Reader Dc (Adobe)
- Reader (Adobe)
- Acrobat Reader (Adobe Systems Incorporated)
References
- http://www.securityfocus.com/bid/100182
- http://www.securitytracker.com/id/1039098
- https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
