Lucene search

[email protected]CVE-2017-11308

HistoryMay 19, 2018 - 5:29 p.m.

CVE-2017-11308

2018-05-1917:29:00

CWE-787

[email protected]

web.nvd.nist.gov

adobe

acrobat

reader

cve-2017-11308

vulnerability

heap overflow

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.487 Medium

EPSS

Percentile

97.5%

JSON

Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

CPENameOperatorVersion
adobe:acrobatadobe acrobatle11.0.22
adobe:acrobatadobe acrobatlt17.011.30068
adobe:acrobat_dcadobe acrobat dclt15.006.30392
adobe:acrobat_dcadobe acrobat dclt18.009.20044
adobe:acrobat_readeradobe acrobat readerle11.0.22
adobe:acrobat_readeradobe acrobat readerlt17.011.30068
adobe:acrobat_reader_dcadobe acrobat reader dclt15.006.30392
adobe:acrobat_reader_dcadobe acrobat reader dclt18.009.20044

CPE	Name	Operator	Version
adobe:acrobat	adobe acrobat	le	11.0.22
adobe:acrobat	adobe acrobat	lt	17.011.30068
adobe:acrobat_dc	adobe acrobat dc	lt	15.006.30392
adobe:acrobat_dc	adobe acrobat dc	lt	18.009.20044
adobe:acrobat_reader	adobe acrobat reader	le	11.0.22
adobe:acrobat_reader	adobe acrobat reader	lt	17.011.30068
adobe:acrobat_reader_dc	adobe acrobat reader dc	lt	15.006.30392
adobe:acrobat_reader_dc	adobe acrobat reader dc	lt	18.009.20044

References

helpx.adobe.com/security/products/acrobat/apsb17-36.html

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.487 Medium

EPSS

Percentile

97.5%

JSON

Related for CVE-2017-11308

prion1 checkpoint_advisories1 zdi1 nessus4 openvas14 adobe1