Kaspersky LabKLA11086KLA11086 Multiple vulnerabilities in Adobe Acrobat and Adobe Reader
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.056 Low
EPSS
Percentile
93.1%
Detect date:
08/08/2017
Severity:
Critical
Description:
Multiple serious vulnerabilities have been found in Adobe Acrobat and Adobe Reader. Malicious users can exploit these vulnerabilities to obtain sensitive information or execute arbitrary code.
Affected products:
Adobe Acrobat Reader DC Continuous earlier than 17.012.20098
Adobe Reader XI earlier than 11.0.21
Adobe Acrobat XI earlier than 11.0.21
Adobe Acrobat 2017 earlier than 17.011.30066
Adobe Acrobat Reader 2017 earlier than 17 17.011.30066
Adobe Acrobat DC Classic earlier than 15.006.30355
Adobe Acrobat DC Continuous earlier than 17.012.20098
Adobe Acrobat Reader DC Classic earlier than 15.006.30355
Solution:
Update to the latest versions
Get Adobe Acrobat DC
Get Adobe Acrobat Reader DC
Get Adobe Reader XI
Original advisories:
Adobe Security Bulletin
Update to Security Bulletin
Impacts:
ACE
Related products:
CVE-IDS:
CVE-2017-30389.3Critical
CVE-2017-112219.3Critical
CVE-2017-112229.3Critical
CVE-2017-112239.3Critical
CVE-2017-112249.3Critical
CVE-2017-112269.3Critical
CVE-2017-112279.3Critical
CVE-2017-112289.3Critical
CVE-2017-112296.8High
CVE-2017-112304.3Warning
CVE-2017-112319.3Critical
CVE-2017-112324.3Warning
CVE-2017-112334.3Warning
CVE-2017-112349.3Critical
CVE-2017-112359.3Critical
CVE-2017-112364.3Warning
CVE-2017-112379.3Critical
CVE-2017-112384.3Warning
CVE-2017-112394.3Warning
CVE-2017-112419.3Critical
CVE-2017-112424.3Warning
CVE-2017-112434.3Warning
CVE-2017-112444.3Warning
CVE-2017-112454.3Warning
CVE-2017-112464.3Warning
CVE-2017-112484.3Warning
CVE-2017-112494.3Warning
CVE-2017-112519.3Critical
CVE-2017-112524.3Warning
CVE-2017-112546.8High
CVE-2017-112554.3Warning
CVE-2017-112569.3Critical
CVE-2017-112579.3Critical
CVE-2017-112584.3Warning
CVE-2017-112599.3Critical
CVE-2017-112609.3Critical
CVE-2017-112619.3Critical
CVE-2017-112629.3Critical
CVE-2017-112636.8High
CVE-2017-112654.3Warning
CVE-2017-112679.3Critical
CVE-2017-112689.3Critical
CVE-2017-112699.3Critical
CVE-2017-112709.3Critical
CVE-2017-112719.3Critical
CVE-2017-30169.3Critical
CVE-2017-31139.3Critical
CVE-2017-31154.3Warning
CVE-2017-31169.3Critical
CVE-2017-31179.3Critical
CVE-2017-31184.3Warning
CVE-2017-31196.8High
CVE-2017-31209.3Critical
CVE-2017-31219.3Critical
CVE-2017-31224.3Warning
CVE-2017-31239.3Critical
CVE-2017-112094.3Warning
CVE-2017-112104.3Warning
CVE-2017-112119.3Critical
CVE-2017-112129.3Critical
CVE-2017-112149.3Critical
CVE-2017-112169.3Critical
CVE-2017-112174.3Warning
CVE-2017-112189.3Critical
CVE-2017-112199.3Critical
CVE-2017-112209.3Critical
Exploitation:
Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.
References
blogs.adobe.com/psirt/?p=1484
supportdownloads.adobe.com/product.jsp?product=1&platform=Windows
supportdownloads.adobe.com/product.jsp?product=10&platform=Windows
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11209
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11210
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11211
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11212
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11214
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11216
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11217
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11218
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11219
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11220
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11221
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11222
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11223
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11224
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11226
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11227
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11228
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11229
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11230
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11231
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11232
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11233
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11234
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11235
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11236
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11237
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11238
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11239
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11241
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11242
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11243
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11244
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11245
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11246
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11248
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11249
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11251
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11252
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11254
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11255
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11256
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11257
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11258
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11259
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11260
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11261
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11262
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11263
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11265
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11267
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11268
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11269
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11270
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11271
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3016
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3038
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3113
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3115
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3116
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3117
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3118
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3119
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3120
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3121
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3122
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3123
get.adobe.com/reader/
helpx.adobe.com/security/products/acrobat/apsb17-24.html
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/class/Exploit/
threats.kaspersky.com/en/product/Adobe-Acrobat-2017/
threats.kaspersky.com/en/product/Adobe-Acrobat-DC-Classic/
threats.kaspersky.com/en/product/Adobe-Acrobat-DC-Continuous/
threats.kaspersky.com/en/product/Adobe-Acrobat-Reader-2017/
threats.kaspersky.com/en/product/Adobe-Acrobat-Reader-DC-Classic/
threats.kaspersky.com/en/product/Adobe-Acrobat-Reader-DC-Continuous/
threats.kaspersky.com/en/product/Adobe-Acrobat-Reader/
threats.kaspersky.com/en/product/Adobe-Acrobat-XI/
threats.kaspersky.com/en/product/Adobe-Acrobat/
threats.kaspersky.com/en/product/Adobe-Reader-XI/
threats.kaspersky.com/en/product/Adobe-Reader/
Related
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.056 Low
EPSS
Percentile
93.1%