Lucene search

[email protected]CVE-2017-3115

HistoryAug 11, 2017 - 7:29 p.m.

CVE-2017-3115

2017-08-1119:29:02

CWE-200

[email protected]

web.nvd.nist.gov

adobe

acrobat reader

2017

information disclosure

vulnerability

pdf

document

handling links

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

7.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.5%

JSON

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an information disclosure vulnerability when handling links in a PDF document.

Affected configurations

Vulners

NVD

Node

adobe_systems_incorporatedacrobat_readerRange≤2017.009.20058

adobe_systems_incorporatedacrobat_readerRange≤2017.008.30051

adobe_systems_incorporatedacrobat_readerRange≤2015.006.30306

adobe_systems_incorporatedacrobat_readerRange≤11.0.20

CPENameOperatorVersion
adobe:acrobatadobe acrobatlt11.0.21
adobe:acrobat_dcadobe acrobat dclt15.006.30355
adobe:acrobat_dcadobe acrobat dcle17.011.30066
adobe:acrobat_dcadobe acrobat dclt17.012.20098
adobe:acrobat_reader_dcadobe acrobat reader dclt15.006.30355
adobe:acrobat_reader_dcadobe acrobat reader dclt17.011.30066
adobe:acrobat_reader_dcadobe acrobat reader dclt17.012.20098
adobe:readeradobe readerlt11.0.21

CPE	Name	Operator	Version
adobe:acrobat	adobe acrobat	lt	11.0.21
adobe:acrobat_dc	adobe acrobat dc	lt	15.006.30355
adobe:acrobat_dc	adobe acrobat dc	le	17.011.30066
adobe:acrobat_dc	adobe acrobat dc	lt	17.012.20098
adobe:acrobat_reader_dc	adobe acrobat reader dc	lt	15.006.30355
adobe:acrobat_reader_dc	adobe acrobat reader dc	lt	17.011.30066
adobe:acrobat_reader_dc	adobe acrobat reader dc	lt	17.012.20098
adobe:reader	adobe reader	lt	11.0.21

CNA Affected

[
  {
    "product": "Acrobat Reader",
    "vendor": "Adobe Systems Incorporated",
    "versions": [
      {
        "status": "affected",
        "version": "2017.009.20058 and earlier"
      },
      {
        "status": "affected",
        "version": "2017.008.30051 and earlier"
      },
      {
        "status": "affected",
        "version": "2015.006.30306 and earlier"
      },
      {
        "status": "affected",
        "version": "11.0.20 and earlier"
      }
    ]
  }
]