CVE-2017-2967

CVE-2017-2967 describes an exploitable memory corruption vulnerability in the XFA engine of Adobe Acrobat/Reader. Affects Adobe Reader/Acrobat versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier; exploitation could lead to arbitrary code execution. Root cause: mem...

CVE-2017-2963

CVE-2017-2963: Adobe Acrobat Reader/Acrobat prior to versions 15.020.20042, 15.006.30244, and 11.0.18 contain a memory corruption vulnerability in the image conversion engine related to TIFF color profile handling. Successful exploitation could lead to arbitrary code execution. Connected sources ...

CVE-2017-2962

CVE-2017-2962 : Adobe Acrobat Reader/Reader with versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier are affected by a type confusion vulnerability in the XSLT engine’s localization handling, which could lead to arbitrary code execution. Affected OSes include Wind...

CVE-2017-2949

Adobe Acrobat/Reader (Windows and macOS) prior to listed patched builds is affected by CVE-2017-2949, a heap overflow in the XSLT engine that could enable arbitrary code execution. Nessus data for APSB17-01 corroborates multiple XSLT/XFA-related issues and memory-corruption variants. Affected ver...

CVE-2017-2951

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the XFA engine, related to sub-form functionality. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2958

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2964

CVE-2017-2964 affects Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier. The vulnerability is a memory corruption in the image conversion engine caused by parsing JPEG EXIF metadata, which could allow arbitrary code execution when a crafted ...

CVE-2017-2947

CVE-2017-2947 affects Adobe Acrobat Reader versions earlier than 15.020.20042, 15.006.30244, and 11.0.18. The vulnerability is a security bypass in which manipulation of the Form Data Format (FDF) is exploited to bypass protections. The connected documents confirm the affected versions and descri...

CVE-2017-2940

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing JPEG 2000 files. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2941

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing Compact Font Format data. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2945

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability when parsing TIFF image files. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2951

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the XFA engine, related to sub-form functionality. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2943: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing tags in TIFF images. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2945: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability when parsing TIFF image files. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2942: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability when processing TIFF image data. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2940: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing JPEG 2000 files. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2939: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing a malformed cross-reference table. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2966: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability in the image conversion engine related to parsing malformed TIFF segments. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2958: Use After Free

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2957: Use After Free

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine, related to collaboration functionality. Successful exploitation could lead to arbitrary code execution...