Lucene search

[email protected]CVE-2017-2952

HistoryJan 11, 2017 - 4:59 a.m.

CVE-2017-2952

2017-01-1104:59:01

CWE-119

[email protected]

web.nvd.nist.gov

cve-2017-2952

security

vulnerability

adobe acrobat reader

buffer overflow

underflow

tiff file

arbitrary code execution

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.9 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.008 Low

EPSS

Percentile

82.1%

JSON

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable buffer overflow / underflow vulnerability in the image conversion module related to parsing tags in TIFF files. Successful exploitation could lead to arbitrary code execution.

Affected configurations

Vulners

NVD

Node

n\/aadobe_acrobat_reader_15.020.20042_and_earlier\,_15.006.30244_and_earlier\,_11.0.18_and_earlier.Range≤15.020.20042

n\/aadobe_acrobat_reader_15.020.20042_and_earlier\,_15.006.30244_and_earlier\,_11.0.18_and_earlier.Range≤15.006.30244

n\/aadobe_acrobat_reader_15.020.20042_and_earlier\,_15.006.30244_and_earlier\,_11.0.18_and_earlier.Range≤11.0.18

CPENameOperatorVersion
adobe:acrobatadobe acrobatle11.0.18
adobe:acrobat_dcadobe acrobat dcle15.006.30244
adobe:acrobat_dcadobe acrobat dcle15.020.20042
adobe:acrobat_reader_dcadobe acrobat reader dcle15.006.30244
adobe:acrobat_reader_dcadobe acrobat reader dcle15.020.20042
adobe:readeradobe readerle11.0.18

CPE	Name	Operator	Version
adobe:acrobat	adobe acrobat	le	11.0.18
adobe:acrobat_dc	adobe acrobat dc	le	15.006.30244
adobe:acrobat_dc	adobe acrobat dc	le	15.020.20042
adobe:acrobat_reader_dc	adobe acrobat reader dc	le	15.006.30244
adobe:acrobat_reader_dc	adobe acrobat reader dc	le	15.020.20042
adobe:reader	adobe reader	le	11.0.18

CNA Affected

[
  {
    "product": "Adobe Acrobat Reader 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier.",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Adobe Acrobat Reader 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier."
      }
    ]
  }
]