Kaspersky LabKLA11138KLA11138 Multiple vulnerabilities in Adobe Acrobat&Reader
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.3 High
AI Score
Confidence
High
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.692 Medium
EPSS
Percentile
97.9%
Detect date:
11/14/2017
Severity:
Critical
Description:
Multiple serious vulnerabilities have been found in Adobe Acrobat and Adobe Reader. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, cause denial of service or bypass security restrictions.
Affected products:
Adobe Reader XI 11.0.22 and earlier versions
Adobe Acrobat XI 11.0.22 and earlier versions
Adobe Acrobat 2017 2017.011.30066 and earlier versions
Adobe Acrobat Reader 2017 2017.011.30066 and earlier versions
Adobe Acrobat DC Classic 2015.006.30355 and earlier versions
Adobe Acrobat DC Continuous 2017.012.20098 and earlier versions
Adobe Acrobat Reader DC Classic 2015.006.30355 and earlier versions
Adobe Acrobat Reader DC Continuous 2017.012.20098 and earlier versions
Solution:
Update to the latest versions
Get Adobe Reader
Original advisories:
Impacts:
ACE
Related products:
CVE-IDS:
CVE-2017-163649.3Critical
CVE-2017-163719.3Critical
CVE-2017-163729.3Critical
CVE-2017-163739.3Critical
CVE-2017-163759.3Critical
CVE-2017-164119.3Critical
CVE-2017-163779.3Critical
CVE-2017-163789.3Critical
CVE-2017-163609.3Critical
CVE-2017-163889.3Critical
CVE-2017-163899.3Critical
CVE-2017-163909.3Critical
CVE-2017-163939.3Critical
CVE-2017-163989.3Critical
CVE-2017-163819.3Critical
CVE-2017-163859.3Critical
CVE-2017-163929.3Critical
CVE-2017-163959.3Critical
CVE-2017-163969.3Critical
CVE-2017-163639.3Critical
CVE-2017-163659.3Critical
CVE-2017-163749.3Critical
CVE-2017-163849.3Critical
CVE-2017-163869.3Critical
CVE-2017-163879.3Critical
CVE-2017-163689.3Critical
CVE-2017-163839.3Critical
CVE-2017-163919.3Critical
CVE-2017-164109.3Critical
CVE-2017-163629.3Critical
CVE-2017-163709.3Critical
CVE-2017-163769.3Critical
CVE-2017-163829.3Critical
CVE-2017-163949.3Critical
CVE-2017-163979.3Critical
CVE-2017-163999.3Critical
CVE-2017-164009.3Critical
CVE-2017-164019.3Critical
CVE-2017-164029.3Critical
CVE-2017-164039.3Critical
CVE-2017-164049.3Critical
CVE-2017-164059.3Critical
CVE-2017-164089.3Critical
CVE-2017-164099.3Critical
CVE-2017-164129.3Critical
CVE-2017-164149.3Critical
CVE-2017-164179.3Critical
CVE-2017-164189.3Critical
CVE-2017-164209.3Critical
CVE-2017-164079.3Critical
CVE-2017-164139.3Critical
CVE-2017-164159.3Critical
CVE-2017-164169.3Critical
CVE-2017-163614.3Warning
CVE-2017-163665.0Warning
CVE-2017-163694.3Warning
CVE-2017-163809.3Critical
CVE-2017-164194.3Warning
CVE-2017-163679.3Critical
CVE-2017-163799.3Critical
CVE-2017-164069.3Critical
Exploitation:
Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.
References
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16360
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16361
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16362
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16363
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16364
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16365
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16366
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16367
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16368
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16369
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16370
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16371
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16372
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16373
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16374
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16375
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16376
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16377
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16378
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16379
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16380
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16381
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16382
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16383
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16384
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16385
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16386
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16387
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16388
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16389
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16390
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16391
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16392
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16393
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16394
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16395
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16396
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16397
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16398
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16399
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16400
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16401
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16402
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16403
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16404
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16405
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16406
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16407
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16408
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16409
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16410
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16411
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16412
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16413
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16414
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16415
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16416
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16417
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16418
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16419
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16420
get.adobe.com/reader/?loc=ru
helpx.adobe.com/security/products/acrobat/apsb17-36.html
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/class/Exploit/
threats.kaspersky.com/en/product/Adobe-Acrobat-2017/
threats.kaspersky.com/en/product/Adobe-Acrobat-DC-Classic/
threats.kaspersky.com/en/product/Adobe-Acrobat-DC-Continuous/
threats.kaspersky.com/en/product/Adobe-Acrobat-Reader-2017/
threats.kaspersky.com/en/product/Adobe-Acrobat-Reader-DC-Classic/
threats.kaspersky.com/en/product/Adobe-Acrobat-Reader-DC-Continuous/
threats.kaspersky.com/en/product/Adobe-Acrobat-XI/
threats.kaspersky.com/en/product/Adobe-Acrobat/
threats.kaspersky.com/en/product/Adobe-Reader-XI/
threats.kaspersky.com/en/product/Adobe-Reader/
Related
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.3 High
AI Score
Confidence
High
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.692 Medium
EPSS
Percentile
97.9%