CVE-2017-16385

Adobe Acrobat and Reader are affected by CVE-2017-16385 due to a buffer access with an incorrect length value in TIFF parsing during XPS conversion. Crafted TIFF input can cause a mismatch between allocated memory and access, enabling arbitrary code execution. Affected product/version set include...

Adobe Acrobat and Reader Buffer Access with Incorrect Length Value (APSB17-36: CVE-2017-16385)

A buffer access vulnerability exists in Adobe Reader and Acrobat. The vulnerability is is caused by a buffer access with incorrect length value in TIFF parsing during XPS conversion. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted TIFF file...