Lucene search

[email protected]CVE-2017-3046

HistoryApr 12, 2017 - 2:59 p.m.

CVE-2017-3046

2017-04-1214:59:00

CWE-125

[email protected]

web.nvd.nist.gov

adobe

acrobat reader

cve-2017-3046

memory address leak

vulnerability

jpeg 2000

parser

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.574 Medium

EPSS

Percentile

97.7%

JSON

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the JPEG 2000 parser, related to contiguous code-stream parsing.

CPENameOperatorVersion
adobe:acrobatadobe acrobatle11.0.19
adobe:acrobat_dcadobe acrobat dcle15.006.30280
adobe:acrobat_dcadobe acrobat dcle15.023.20070
adobe:acrobat_reader_dcadobe acrobat reader dcle15.006.30280
adobe:acrobat_reader_dcadobe acrobat reader dcle15.023.20070
adobe:readeradobe readerle11.0.19

CPE	Name	Operator	Version
adobe:acrobat	adobe acrobat	le	11.0.19
adobe:acrobat_dc	adobe acrobat dc	le	15.006.30280
adobe:acrobat_dc	adobe acrobat dc	le	15.023.20070
adobe:acrobat_reader_dc	adobe acrobat reader dc	le	15.006.30280
adobe:acrobat_reader_dc	adobe acrobat reader dc	le	15.023.20070
adobe:reader	adobe reader	le	11.0.19