The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, allow attackers to execute arbitrary code.

The vulnerability of JavaScript programs for viewing PDF files in Adobe Reader, Document Cloud, Adobe Acrobat, and other PDF editing programs is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code related to the...

Adobe Acrobat and Reader Heap Overflow (APSB17-01: CVE-2017-2959)

A heap overflow vulnerability exists in Adobe Reader. The vulnerability is due to an error in the way Adobe Acrobat and Reader handles objects in memory. A remote attacker could trigger this issue via a specially crafted JPG file...

Adobe Reader DC XSLT apply-templates Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within XSLT's...

Adobe Acrobat and Reader Memory Corruption (APSB17-01: CVE-2017-2960)

A memory corruption vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to an error in the image conversion engine, related to parsing of EXIF metadata. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted PDF file...

Adobe Acrobat and Reader Memory Corruption (APSB17-01: CVE-2017-2965)

A memory corruption vulnerability exists in Adobe Reader. The vulnerability is due to an error in the way Adobe Acrobat and Reader handles objects in memory. A remote attacker could trigger this issue via a specially crafted TIFF file...

Adobe Acrobat and Reader Memory Corruption Vulnerability (CNVD-2017-00418)

Adobe Acrobat and Reader is the United States Adobe developed a portable document format can be used to publish all the documents of the editing software. A memory corruption vulnerability exists in Adobe Acrobat and Reader. An attacker could exploit this vulnerability to execute arbitrary code i...

Adobe Acrobat and Reader Memory Corruption Vulnerability (CNVD-2017-00416)

Adobe Acrobat and Reader is the United States Adobe developed a portable document format can be used to publish all the documents of the editing software. A memory corruption vulnerability exists in Adobe Acrobat and Reader. An attacker could exploit this vulnerability to execute arbitrary code i...

Adobe Acrobat and Reader Memory Misreference Vulnerability (CNVD-2017-00424)

Adobe Reader, etc. are the United States of America Auduby Adobe company's products. Adobe Reader is a free PDF file reader; Acrobat is a PDF file editing and conversion tools; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF.Classic and Continuous are the two update...

Adobe Acrobat and Reader Memory Corruption Vulnerability (CNVD-2017-00417)

Adobe Acrobat and Reader is the United States Adobe developed a portable document format can be used to publish all the documents of the editing software. A memory corruption vulnerability exists in Adobe Acrobat and Reader. An attacker could exploit this vulnerability to execute arbitrary code i...

Adobe Acrobat/Reader Buffer Overflow Vulnerability (CNVD-2017-00425)

Adobe Reader is a PDF document reading software.Acrobat is a PDF document editing software. There are buffer overflow vulnerabilities in AdobeAcrobat/Reader that can be exploited by remote attackers to execute arbitrary code...

Adobe Reader < 15.006.30279 / 15.023.20053 Multiple Vulnerabilities (APSB17-01)

The version of Adobe Reader installed on the remote Windows host is a version prior to 15.006.30279 or 15.023.20053. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable...

Adobe Acrobat and Reader Memory Misreference Vulnerability (CNVD-2017-00421)

Adobe Reader, etc. are the United States of America Auduby Adobe company's products. Adobe Reader is a free PDF file reader; Acrobat is a PDF file editing and conversion tools; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF.Classic and Continuous are the two update...

Adobe Acrobat and Reader Memory Misreference Vulnerability (CNVD-2017-00422)

Adobe Reader, etc. are the United States of America Auduby Adobe company's products. Adobe Reader is a free PDF file reader; Acrobat is a PDF file editing and conversion tools; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF.Classic and Continuous are the two update...

Adobe Acrobat and Reader Memory Misreference Vulnerability (CNVD-2017-00423)

Adobe Reader, etc. are the United States of America Auduby Adobe company's products. Adobe Reader is a free PDF file reader; Acrobat is a PDF file editing and conversion tools; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF.Classic and Continuous are the two update...

Adobe Reader < 11.0.19 / 15.006.30279 / 15.023.20053 Multiple Vulnerabilities (APSB17-01) (macOS)

The version of Adobe Reader installed on the remote macOS or Mac OS X host is prior to 11.0.19, 15.006.30279, or 15.023.20053. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist due to improper validation of unspecified input. An unauthenticated,...

Adobe Acrobat and Reader Memory Corruption Vulnerability (CNVD-2017-00415)

Adobe Acrobat and Reader is the United States Adobe developed a portable document format can be used to publish all the documents of the editing software. A memory corruption vulnerability exists in Adobe Acrobat and Reader. An attacker could exploit this vulnerability to execute arbitrary code i...

Adobe Acrobat and Reader Memory Corruption Vulnerability (CNVD-2017-00419)

Adobe Acrobat and Reader is the United States Adobe developed a portable document format can be used to publish all the documents of the editing software. A memory corruption vulnerability exists in Adobe Acrobat and Reader. An attacker could exploit this vulnerability to execute arbitrary code i...

Adobe Acrobat/Reader Buffer Overflow Vulnerability (CNVD-2017-00426)

Adobe Reader is a PDF document reading software.Acrobat is a PDF document editing software. There are buffer overflow vulnerabilities in AdobeAcrobat/Reader that can be exploited by remote attackers to execute arbitrary code...

CVE-2017-2950

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the XFA engine, related to layout functionality. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2952

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable buffer overflow / underflow vulnerability in the image conversion module related to parsing tags in TIFF files. Successful exploitation could lead to arbitrary code execution...