CVE-2017-11241

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable heap overflow vulnerability in the image conversion engine when processing Enhanced Metafile Format EMF data related to polygons. Successful...

CVE-2017-11260

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format EMF private data interpreted as a GIF image...

CVE-2017-11248

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format EMF data related to pixel block transfer...

EUVD-2017-2843

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability that occurs when reading a JPEG file embedded within XML Paper Specification XPS file. Successful exploitation could...

CVE-2017-11270

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format EMF private data representing icons. Successf...

CVE-2017-11211

CVE-2017-11211 details are not publicly provided in the connected documents. Monitor Adobe advisories and vendor bulletins for updates, fixes, affected versions, and remediation guidance.

CVE-2017-3116

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the MakeAccessible plugin when parsing TrueType font data. Successful exploitation could lead to arbitrary code...

CVE-2017-11239

Technical details for CVE-2017-11239 are not publicly available in the provided documents. Monitor for updates from Adobe and vulnerability feeds; no product/version specifics or remediation are provided here.

CVE-2017-11269

CVE-2017-11269 affects multiple Adobe Acrobat products (Reader/DC/Classic/Pro) across Windows, Mac, and mobile tracks. The vulnerability is a memory corruption flaw in the image conversion engine when handling Enhanced Metafile Format (EMF) image stream data, enabling arbitrary code execution on ...

CVE-2017-11259

No technical details about CVE-2017-11259 are provided in the connected documents. The sources present do not specify affected products/versions, root cause, exploit status, or remediation beyond the general description.

CVE-2017-11242

Adobe Acrobat/Acrobat Reader is affected by a memory corruption vulnerability in the image conversion EMF processing engine, potentially enabling arbitrary code execution on successful exploitation. Affected products/versions include Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and e...

CVE-2017-11224

CVE-2017-11224 affects Adobe Acrobat/Reader (various 2017/earlier builds) with the XFA layout engine. It is described as a use-after-free in XFA, with successful exploitation potentially enabling arbitrary code execution (high severity). The connected OpenVAS entries reference this CVE as part of...

CVE-2017-11237

Technical details for CVE-2017-11237 are not publicly available in the provided documents. Monitor for updates from vendor advisories and vulnerability databases.

CVE-2017-3113

CVE-2017-3113 is an exploitable use-after-free in the JavaScript engine of Adobe Acrobat/Reader (and related Acrobat products) affecting 2017-era builds and earlier. The initial description specifies arbitrary code execution if successfully exploited by creating large strings. Connected OpenVAS e...

CVE-2017-3122

CVE-2017-3122 affects Adobe Acrobat Reader (2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier). The issue is a memory corruption in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to Bezier curves, w...

CVE-2017-3016

CVE-2017-3016 affects Adobe Acrobat family (Acrobat Reader DC/Classic/Continuous Track and related DC variants) with memory corruption leading to arbitrary code execution. Affected are multiple local builds: Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and...

CVE-2017-11211

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable heap overflow vulnerability in the JPEG parser. Successful exploitation could lead to arbitrary code execution...

Adobe Acrobat Reader DC AcroForm PDFDocEncoding Remote Code Execution Vulnerability

Summary An exploitable case of parser confusion can lead to invalid pointer arithmetic in part of code responsible for parsing AcroForm forms in the Adobe Acrobat Reader DC 2017.009.20044. A specially crafted PDF file can abuse this unchecked pointer arithmetic to access and overwrite arbitrary...

(Pwn2Own) Adobe Reader DC util streamFromString Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Threat Outbreak Alert RuleID29258: Email Messages Distributing Malicious Software on May 24, 2017

Medium Alert ID: 53949 First Published: 2017 May 24 15:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29258 may contain the following files: Name | Size...