CVE-2017-11229

Technical details for CVE-2017-11229 are not provided in the supplied connected documents; information about affected products, exploitability, or remediation is not available here. Monitor for updates.

CVE-2017-11239

Technical details for CVE-2017-11239 are not publicly available in the provided documents. Monitor for updates from Adobe and vulnerability feeds; no product/version specifics or remediation are provided here.

CVE-2017-11242

Adobe Acrobat/Acrobat Reader is affected by a memory corruption vulnerability in the image conversion EMF processing engine, potentially enabling arbitrary code execution on successful exploitation. Affected products/versions include Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and e...

CVE-2017-11245

CVE-2017-11245 : Adobe Acrobat Reader and Acrobat versions up to listed early builds contain a memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data. Successful exploitation could lead to arbitrary code execution. Affected produ...

CVE-2017-11236

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the internal handling of UTF-16 literal strings. Successful exploitation could lead to arbitrary code execution...

CVE-2017-11248

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format EMF data related to pixel block transfer...

CVE-2017-3123

CVE-2017-3123 is an Adobe Acrobat/Reader vulnerability where memory corruption occurs in the EMF image conversion engine while processing Enhanced Metafile Format data drawing position definitions. Exploitation could lead to arbitrary code execution on affected builds such as Acrobat Reader 2017....

CVE-2017-3122

CVE-2017-3122 affects Adobe Acrobat Reader (2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier). The issue is a memory corruption in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to Bezier curves, w...

CVE-2017-3116

CVE-2017-3116 affects Adobe Acrobat/Reader: the vulnerability is a memory corruption in the MakeAccessible plugin while parsing TrueType font data, leading to arbitrary code execution. Affected products/versions per the entry include Acrobat/Reader up to 2017.009.20058 (and older branches: 2017.0...

CVE-2017-3117

CVE-2017-3117 affects Adobe Acrobat/Reader (2017 and earlier, across DC and classic tracks) with a heap overflow in the PDF link-handling plugin that could lead to arbitrary code execution. OpenVAS entries corroborate this CVE as part of the APSB17-24 update family addressing Adobe Acrobat/Reader...

CVE-2017-3113

CVE-2017-3113 is an exploitable use-after-free in the JavaScript engine of Adobe Acrobat/Reader (and related Acrobat products) affecting 2017-era builds and earlier. The initial description specifies arbitrary code execution if successfully exploited by creating large strings. Connected OpenVAS e...

Adobe Acrobat Reader DC AcroForm PDFDocEncoding Remote Code Execution Vulnerability

Summary An exploitable case of parser confusion can lead to invalid pointer arithmetic in part of code responsible for parsing AcroForm forms in the Adobe Acrobat Reader DC 2017.009.20044. A specially crafted PDF file can abuse this unchecked pointer arithmetic to access and overwrite arbitrary...

(Pwn2Own) Adobe Reader DC util streamFromString Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Threat Outbreak Alert RuleID29258: Email Messages Distributing Malicious Software on May 24, 2017

Medium Alert ID: 53949 First Published: 2017 May 24 15:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29258 may contain the following files: Name | Size...

Adobe Acrobat and Reader Memory Corruption (APSB17-11: CVE-2017-3037)

A memory corruption vulnerability exists in Adobe Acrobat Reader. The vulnerability is due to excessive recursive calls leading to a stack overflow. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...

ColdFusion Hotfix Resolves XSS, Java Deserialization Bugs

Adobe today released an important security hotfix for several versions of its ColdFusion rapid web application development platform. The company said the update addresses an input validation vulnerability CVE-2017-3008 in the software that could be used in reflected cross-site scripting XSS...

Adobe Acrobat and Reader Memory Corruption (APSB17-11: CVE-2017-3038)

A memory corruption vulnerability exists in Adobe Acrobat Reader. The vulnerability is due to improper parsing of True Type font TTF format stream data resulting in out of bounds memory access. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted...

CVE-2017-3065

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the font manipulation functionality. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3057

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vulnerability in the JavaScript API related to the collaboration functionality. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3065

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the font manipulation functionality. Successful exploitation could lead to arbitrary code execution...