CVE-2017-2949

Adobe Acrobat/Reader (Windows and macOS) prior to listed patched builds is affected by CVE-2017-2949, a heap overflow in the XSLT engine that could enable arbitrary code execution. Nessus data for APSB17-01 corroborates multiple XSLT/XFA-related issues and memory-corruption variants. Affected ver...

CVE-2017-2957

CVE-2017-2957 is an Adobe Acrobat/Reader use-after-free vulnerability in the JavaScript engine (collaboration functionality) that could lead to arbitrary code execution. Affected products and versions include Acrobat/Reader on Windows and macOS: 15.020.20042 and earlier, 15.006.30244 and earlier,...

CVE-2017-2939

CVE-2017-2939 : Adobe Acrobat Reader/Acrobat on Windows and macOS is affected by a memory corruption vulnerability when processing a malformed cross-reference table. A successful exploit could lead to arbitrary code execution. Affected versions include Acrobat/Reader 15.020.20042 and earlier, 15....

CVE-2017-2963

CVE-2017-2963: Adobe Acrobat Reader/Acrobat prior to versions 15.020.20042, 15.006.30244, and 11.0.18 contain a memory corruption vulnerability in the image conversion engine related to TIFF color profile handling. Successful exploitation could lead to arbitrary code execution. Connected sources ...

CVE-2017-2948

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable buffer overflow / underflow vulnerability in the XFA engine. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2967

CVE-2017-2967 describes an exploitable memory corruption vulnerability in the XFA engine of Adobe Acrobat/Reader. Affects Adobe Reader/Acrobat versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier; exploitation could lead to arbitrary code execution. Root cause: mem...

CVE-2017-2966

CVE-2017-2966 is an exploitable heap overflow in Adobe Acrobat Reader’s image conversion engine caused by parsing malformed TIFF segments. Affected products include Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier. The vulnerability can lea...

CVE-2017-2948

CVE-2017-2948 affects Adobe Acrobat/Reader (XFA engine). Affected: Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier. Root cause: exploitable buffer overflow/underflow in XFA engine leading to arbitrary code execution upon successful exploitation....

CVE-2017-2943

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing tags in TIFF images. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2967

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the XFA engine related to a form's structure and organization. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2954

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion module when handling malformed TIFF images. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2940

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing JPEG 2000 files. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2960

CVE-2017-2960 affects Adobe Acrobat/Reader's image conversion engine, due to memory corruption when parsing EXIF metadata. Affected products include Acrobat Reader versions 11.0.18 and earlier, 15.006.30244 and earlier, and 15.020.20042 and earlier. Successful exploitation could lead to arbitrary...

CVE-2017-2941

CVE-2017-2941 affects Adobe Acrobat/Reader components that process Compact Font Format data. The vulnerability is a memory corruption flaw in older Acrobat Reader versions (15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier) that could enable arbitrary code execution on succe...

CVE-2017-2960

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to parsing of EXIF metadata. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2963

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to handling of the color profile in a TIFF file. Successful exploitation could lead to arbitrary code...

CVE-2017-2958

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2944

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when parsing crafted TIFF image files. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2947

CVE-2017-2947 affects Adobe Acrobat Reader versions earlier than 15.020.20042, 15.006.30244, and 11.0.18. The vulnerability is a security bypass in which manipulation of the Form Data Format (FDF) is exploited to bypass protections. The connected documents confirm the affected versions and descri...

CVE-2017-2965

CVE-2017-2965 describes a memory corruption vulnerability in Adobe Acrobat/Reader's image conversion engine, specifically in TIFF file parsing. Affected products include Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier. Successful exploitat...