Lucene search

[email protected]CVE-2017-11306

HistoryMay 19, 2018 - 5:29 p.m.

CVE-2017-11306

2018-05-1917:29:00

CWE-125

[email protected]

web.nvd.nist.gov

cve-2017-11306

adobe acrobat

reader

vulnerability

out-of-bounds read

arbitrary code execution

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.01 Low

EPSS

Percentile

83.9%

JSON

Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

CPENameOperatorVersion
adobe:acrobatadobe acrobatle11.0.22
adobe:acrobatadobe acrobatlt17.011.30068
adobe:acrobat_dcadobe acrobat dclt15.006.30392
adobe:acrobat_dcadobe acrobat dclt18.009.20044
adobe:acrobat_readeradobe acrobat readerle11.0.22
adobe:acrobat_readeradobe acrobat readerlt17.011.30068
adobe:acrobat_reader_dcadobe acrobat reader dclt15.006.30392
adobe:acrobat_reader_dcadobe acrobat reader dclt18.009.20044

CPE	Name	Operator	Version
adobe:acrobat	adobe acrobat	le	11.0.22
adobe:acrobat	adobe acrobat	lt	17.011.30068
adobe:acrobat_dc	adobe acrobat dc	lt	15.006.30392
adobe:acrobat_dc	adobe acrobat dc	lt	18.009.20044
adobe:acrobat_reader	adobe acrobat reader	le	11.0.22
adobe:acrobat_reader	adobe acrobat reader	lt	17.011.30068
adobe:acrobat_reader_dc	adobe acrobat reader dc	lt	15.006.30392
adobe:acrobat_reader_dc	adobe acrobat reader dc	lt	18.009.20044

References

helpx.adobe.com/security/products/acrobat/apsb17-36.html

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.01 Low

EPSS

Percentile

83.9%

JSON

Related for CVE-2017-11306

zdi1 prion1 nessus4 openvas14 adobe1