CVE-2017-16361

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a security bypass vulnerability when handling XFDF files...

CVE-2017-11293

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to...

CVE-2017-16381

CVE-2017-16381 affects Adobe Acrobat and Reader. A vulnerability exists due to a buffer access with an incorrect length value when processing TIFF files embedded within an XPS document. Crafted TIFF input can cause a mismatch between the allocated buffer size and the access allowed, enabling arbi...

CVE-2017-16385

Adobe Acrobat and Reader are affected by CVE-2017-16385 due to a buffer access with an incorrect length value in TIFF parsing during XPS conversion. Crafted TIFF input can cause a mismatch between allocated memory and access, enabling arbitrary code execution. Affected product/version set include...

CVE-2017-16384

The CVE-2017-16384 entry describes a buffer over-read in Adobe Acrobat/Reader (affecting 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier) in the exif processing module for PNG files during XPS conversion. The vulnerability arises from in...

CVE-2017-16389

Technical details for CVE-2017-16389 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2017-16368

Technical details for CVE-2017-16368 are not publicly available in the provided documents. Monitor for updates from Adobe and advisories; no specific affected products, versions, vectors, or fixes are described here.

CVE-2017-16400

Technical details for CVE-2017-16400 are not present in the provided documents; the connected items reference other CVEs but do not describe this one. Monitor for updates.

CVE-2017-16391

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is a result of untrusted input that is used to calculate an array index; the...

CVE-2017-16370

CVE-2017-16370 affects Adobe Acrobat and Reader (versions listed in the description) with a vulnerability in the JavaScript engine caused by reading data past the end of a buffer due to an invalid pointer offset. The issue can lead to exposure of sensitive data. The CVSS metrics indicate High imp...

CVE-2017-16399

Adobe Acrobat/Reader (various channels: 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier) contains a vulnerability in the XPS parsing module caused by an untrusted pointer dereference. This results in pointers landing outside the target proce...

CVE-2017-16391

CVE-2017-16391 affects Adobe Acrobat and Reader: versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier. The vulnerability arises from untrusted input used to calculate an array index in the printing functionality, leading to a write t...

CVE-2017-16371

CVE-2017-16371 describes an untrusted pointer dereference in the JavaScript engine of Adobe Acrobat/Reader (versions listed in the bulletin) that can cause dereferenced pointers to memory locations outside the relevant process address space. The result is a read operation leading to potential exp...

CVE-2017-16386

Technical details about CVE-2017-16386 are not publicly provided in the provided connected documents. Monitor for updates.

CVE-2017-16417

CVE-2017-16417 affects Adobe Acrobat/Reader (multiple tracked versions: 2017.012.20098 and earlier; 2017.011.30066 and earlier; 2015.006.30355 and earlier; 11.0.22 and earlier). The issue stems from a computation reading data past the end of a target buffer in the font parsing module, caused by a...

CVE-2017-16405

CVE-2017-16405 affects Adobe Acrobat and Reader (versions listed in the initial description) where a buffer overread occurs during Acrobat’s page display due to reading data past the end of a target buffer; an invalid (out-of-range) pointer offset during access of internal data structure fields c...

Adobe Reader < 11.0.23 / 2015.006.30392 / 2017.011.30068 / 2018.009.20044 Multiple Vulnerabilities (APSB17-36) (macOS)

The version of Adobe Reader installed on the remote macOS or Mac OS X host is a version prior to 11.0.23, 2015.006.30392, 2017.011.30068, or 2018.009.20044. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the...

Adobe Acrobat < 11.0.23 / 2015.006.30392 / 2017.011.30068 / 2018.009.20044 Multiple Vulnerabilities (APSB17-36)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 11.0.23, 2015.006.30392, 2017.011.30068, or 2018.009.20044. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the...

Adobe Reader < 11.0.23 / 2015.006.30392 / 2017.011.30068 / 2018.009.20044 Multiple Vulnerabilities (APSB17-36)

The version of Adobe Reader installed on the remote Windows host is a version prior to 11.0.23, 2015.006.30392, 2017.011.30068, or 2018.009.20044. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the...

Adobe Reader Security Updates (APSB17-36) - Mac OS X

Adobe Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...