Memory corruption

2017-08-1119:29:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

7 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.014 Low

EPSS

Percentile

86.3%

JSON

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to transformation of blocks of pixels. Successful exploitation could lead to arbitrary code execution.

CPENameOperatorVersion
acrobatge11.0.0
acrobatle11.0.20
acrobatge17.011.00000
acrobatle17.011.30066
acrobat_dcge15.006.30060
acrobat_dcle15.006.30306
acrobat_dcge15.007.20033
acrobat_dcle17.009.20058
acrobat_readerge17.011.00000
acrobat_readerle17.011.30066

Name	Operator	Version
acrobat	ge	11.0.0
acrobat	le	11.0.20
acrobat	ge	17.011.00000
acrobat	le	17.011.30066
acrobat_dc	ge	15.006.30060
acrobat_dc	le	15.006.30306
acrobat_dc	ge	15.007.20033
acrobat_dc	le	17.009.20058
acrobat_reader	ge	17.011.00000
acrobat_reader	le	17.011.30066