CVE-2017-16370

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs because of a computation that reads data that is past the end of the targ...

CVE-2017-16387

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the...

CVE-2017-16373

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This issue is due to an untrusted pointer dereference. In this scenario, the input is crafted in wa...

CVE-2017-16361

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a security bypass vulnerability when handling XFDF files...

CVE-2017-11293

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to...

CVE-2017-16386

Technical details about CVE-2017-16386 are not publicly provided in the provided connected documents. Monitor for updates.

CVE-2017-16368

Technical details for CVE-2017-16368 are not publicly available in the provided documents. Monitor for updates from Adobe and advisories; no specific affected products, versions, vectors, or fixes are described here.

CVE-2017-16371

CVE-2017-16371 describes an untrusted pointer dereference in the JavaScript engine of Adobe Acrobat/Reader (versions listed in the bulletin) that can cause dereferenced pointers to memory locations outside the relevant process address space. The result is a read operation leading to potential exp...

CVE-2017-16384

The CVE-2017-16384 entry describes a buffer over-read in Adobe Acrobat/Reader (affecting 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier) in the exif processing module for PNG files during XPS conversion. The vulnerability arises from in...

CVE-2017-16391

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is a result of untrusted input that is used to calculate an array index; the...

CVE-2017-16385

Adobe Acrobat and Reader are affected by CVE-2017-16385 due to a buffer access with an incorrect length value in TIFF parsing during XPS conversion. Crafted TIFF input can cause a mismatch between allocated memory and access, enabling arbitrary code execution. Affected product/version set include...

CVE-2017-16399

Adobe Acrobat/Reader (various channels: 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier) contains a vulnerability in the XPS parsing module caused by an untrusted pointer dereference. This results in pointers landing outside the target proce...

CVE-2017-16400

Technical details for CVE-2017-16400 are not present in the provided documents; the connected items reference other CVEs but do not describe this one. Monitor for updates.

CVE-2017-16381

CVE-2017-16381 affects Adobe Acrobat and Reader. A vulnerability exists due to a buffer access with an incorrect length value when processing TIFF files embedded within an XPS document. Crafted TIFF input can cause a mismatch between the allocated buffer size and the access allowed, enabling arbi...

CVE-2017-16370

CVE-2017-16370 affects Adobe Acrobat and Reader (versions listed in the description) with a vulnerability in the JavaScript engine caused by reading data past the end of a buffer due to an invalid pointer offset. The issue can lead to exposure of sensitive data. The CVSS metrics indicate High imp...

CVE-2017-16391

A memory corruption vulnerability exists in Adobe Acrobat and Reader versions 2017.012.20098 and earlier , 2017.011.30066 and earlier , 2015.006.30355 and earlier , and 11.0.22 and earlier . The root cause is the use of untrusted input to calculate an array index within the printing functionality...

CVE-2017-16417

CVE-2017-16417 affects Adobe Acrobat/Reader (multiple tracked versions: 2017.012.20098 and earlier; 2017.011.30066 and earlier; 2015.006.30355 and earlier; 11.0.22 and earlier). The issue stems from a computation reading data past the end of a target buffer in the font parsing module, caused by a...

CVE-2017-16405

CVE-2017-16405 affects Adobe Acrobat and Reader (versions listed in the initial description) where a buffer overread occurs during Acrobat’s page display due to reading data past the end of a target buffer; an invalid (out-of-range) pointer offset during access of internal data structure fields c...

CVE-2017-16389

Technical details for CVE-2017-16389 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2017-16385: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer access with an incorrect length value in TIFF parsing durin...