CVE-2017-16389

Technical details for CVE-2017-16389 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2017-16368

Technical details for CVE-2017-16368 are not publicly available in the provided documents. Monitor for updates from Adobe and advisories; no specific affected products, versions, vectors, or fixes are described here.

CVE-2017-16370

CVE-2017-16370 affects Adobe Acrobat and Reader (versions listed in the description) with a vulnerability in the JavaScript engine caused by reading data past the end of a buffer due to an invalid pointer offset. The issue can lead to exposure of sensitive data. The CVSS metrics indicate High imp...

CVE-2017-16371

CVE-2017-16371 describes an untrusted pointer dereference in the JavaScript engine of Adobe Acrobat/Reader (versions listed in the bulletin) that can cause dereferenced pointers to memory locations outside the relevant process address space. The result is a read operation leading to potential exp...

CVE-2017-16405

CVE-2017-16405 affects Adobe Acrobat and Reader (versions listed in the initial description) where a buffer overread occurs during Acrobat’s page display due to reading data past the end of a target buffer; an invalid (out-of-range) pointer offset during access of internal data structure fields c...

CVE-2017-16391

CVE-2017-16391 affects Adobe Acrobat and Reader: versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier. The vulnerability arises from untrusted input used to calculate an array index in the printing functionality, leading to a write t...

CVE-2017-16386

Technical details about CVE-2017-16386 are not publicly provided in the provided connected documents. Monitor for updates.

CVE-2017-16417

CVE-2017-16417 affects Adobe Acrobat/Reader (multiple tracked versions: 2017.012.20098 and earlier; 2017.011.30066 and earlier; 2015.006.30355 and earlier; 11.0.22 and earlier). The issue stems from a computation reading data past the end of a target buffer in the font parsing module, caused by a...

Adobe Reader < 11.0.23 / 2015.006.30392 / 2017.011.30068 / 2018.009.20044 Multiple Vulnerabilities (APSB17-36) (macOS)

The version of Adobe Reader installed on the remote macOS or Mac OS X host is a version prior to 11.0.23, 2015.006.30392, 2017.011.30068, or 2018.009.20044. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the...

Adobe Reader Security Updates (APSB17-36) - Windows

Adobe Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...

Adobe Reader < 11.0.23 / 2015.006.30392 / 2017.011.30068 / 2018.009.20044 Multiple Vulnerabilities (APSB17-36)

The version of Adobe Reader installed on the remote Windows host is a version prior to 11.0.23, 2015.006.30392, 2017.011.30068, or 2018.009.20044. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the...

Adobe Acrobat < 11.0.23 / 2015.006.30392 / 2017.011.30068 / 2018.009.20044 Multiple Vulnerabilities (APSB17-36)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 11.0.23, 2015.006.30392, 2017.011.30068, or 2018.009.20044. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the...

Adobe Reader Security Updates (APSB17-36) - Mac OS X

Adobe Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...

Adobe Acrobat and Reader Buffer Access Vulnerability (CNVD-2017-35601)

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acroba and Reader security vulnerabilities exist. Remote attackers can use the...

Adobe Acrobat/Reader Out-of-Bounds Read Vulnerability (CNVD-2017-35652)

Adobe Acrobat and Reader is the United States Ordoby publicly issued PDF file processing program. Adobe Acrobat and Reader processing PDF files exist out-of-bounds read vulnerability, allowing remote attackers can exploit the vulnerability to submit a special file, inducing the user to parse, can...

Adobe Acroba and Reader Buffer Access Vulnerabilities

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acroba and Reader security vulnerabilities exist. Remote attackers can use the...

Memory Misreference Vulnerability in Multiple Adobe Products (CNVD-2017-35586)

Adobe Acrobat DC, etc. are the United States of America Auduby Adobe company's products. Acrobat DC is a desktop PDF solution; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF.Classic and Continuous are Acrobat DC and Acrobat Reader DC product download center provides...

Adobe Acrobat/Reader Untrustworthy Pointer Reference Vulnerability (CNVD-2017-36610)

Adobe Acrobat and Reader is the United States of America Odooby publicly issued PDF file processing program. Adobe Acrobat and Reader processing PDF files have untrustworthy pointer references vulnerability, allowing remote attackers can exploit the vulnerability to submit a special file, inducin...

Adobe Acrobat/Reader Out-of-Bounds Read Vulnerability (CNVD-2017-36599)

Adobe Acrobat and Reader is the United States of America Odooby publicly issued PDF file processing program. Adobe Acrobat and Reader processing PDF files exist out-of-bounds read vulnerability, allowing remote attackers can exploit the vulnerability to submit a special file, inducing the user to...

Microsoft Patch Tuesday - November 2017

Microsoft has released its monthly set of security advisories for vulnerabilities that have been identified and addressed in various products. This month's advisory release addresses 53 new vulnerabilities with 19 of them rated critical, 31 of them rated important and 3 of them rated moderate...