Kaspersky LabKLA10992KLA10992 Multiple vulnerabilities in Adobe Acrobat and Adobe Reader
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.574 Medium
EPSS
Percentile
97.7%
Detect date:
04/06/2017
Severity:
Critical
Description:
Multiple serious vulnerabilities have been found in Adobe Acrobat and Adobe Reader. Malicious users can exploit these vulnerabilities to execute arbitary code and possibly cause a denial of service.
Affected products:
Adobe Acrobat DC Continuous earlier than 2017.009.20044
Adobe Acrobat Reader DC Continuous earlier than 2017.009.20044
Adobe Acrobat DC Classic earlier than 2015.006.30306
Adobe Acrobat Reader DC Classic earlier than 2015.006.30306
Adobe Acrobat XI earlier than 11.0.20
Adobe Reader XI earlier than 11.0.20
Solution:
Update to the latest versions
Download Adobe Acrobat
Download Adobe Acrobat Reader DC
Download Adobe Reader XI
Original advisories:
Impacts:
ACE
Related products:
CVE-IDS:
CVE-2017-30119.3Critical
CVE-2017-30129.3Critical
CVE-2017-30139.3Critical
CVE-2017-30149.3Critical
CVE-2017-30159.3Critical
CVE-2017-30189.3Critical
CVE-2017-30199.3Critical
CVE-2017-30204.3Warning
CVE-2017-30214.3Warning
CVE-2017-30224.3Warning
CVE-2017-30249.3Critical
CVE-2017-30259.3Critical
CVE-2017-30269.3Critical
CVE-2017-30279.3Critical
CVE-2017-30289.3Critical
CVE-2017-30309.3Critical
CVE-2017-30314.3Warning
CVE-2017-30324.3Warning
CVE-2017-30334.3Warning
CVE-2017-30349.3Critical
CVE-2017-30369.3Critical
CVE-2017-30389.3Critical
CVE-2017-30399.3Critical
CVE-2017-30409.3Critical
CVE-2017-30429.3Critical
CVE-2017-30434.3Warning
CVE-2017-30449.3Critical
CVE-2017-30454.3Warning
CVE-2017-30464.3Warning
CVE-2017-30489.3Critical
CVE-2017-30499.3Critical
CVE-2017-30509.3Critical
CVE-2017-30519.3Critical
CVE-2017-30524.3Warning
CVE-2017-30549.3Critical
CVE-2017-30559.3Critical
CVE-2017-30569.3Critical
CVE-2017-30579.3Critical
CVE-2017-30659.3Critical
Exploitation:
Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.
References
supportdownloads.adobe.com/product.jsp?product=1&platform=Windows
supportdownloads.adobe.com/product.jsp?product=10&platform=Windows
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3011
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3012
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3013
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3014
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3015
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3018
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3019
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3020
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3021
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3022
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3024
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3025
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3026
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3027
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3028
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3030
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3031
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3032
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3033
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3034
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3036
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3038
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3039
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3040
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3042
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3043
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3044
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3045
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3046
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3048
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3049
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3050
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3051
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3052
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3054
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3055
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3056
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3057
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3065
get.adobe.com/reader/
helpx.adobe.com/security/products/acrobat/apsb17-11.html
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/class/Exploit/
threats.kaspersky.com/en/product/Adobe-Acrobat-DC-Classic/
threats.kaspersky.com/en/product/Adobe-Acrobat-DC-Continuous/
threats.kaspersky.com/en/product/Adobe-Acrobat-Reader-DC-Classic/
threats.kaspersky.com/en/product/Adobe-Acrobat-Reader-DC-Continuous/
threats.kaspersky.com/en/product/Adobe-Acrobat-XI/
threats.kaspersky.com/en/product/Adobe-Reader-XI/
Related
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.574 Medium
EPSS
Percentile
97.7%