359 matches found
CVE-2017-3023
CVE-2017-3023 affects Adobe Acrobat Reader/Acrobat, where a memory corruption in the JPEG 2000 code-stream tile handling could lead to arbitrary code execution. Affected products/versions, as stated, include Acrobat Reader up to v11.0.19 and earlier, and specific 2015/2017 update branches (e.g., ...
CVE-2017-3049
Technical details for CVE-2017-3049 are not provided in the connected documents; the initial description gives a summary (heap overflow in the TIFF image conversion) but no further specifics.
CVE-2016-1047
Technical details for CVE-2016-1047 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2016-1056
CVE-2016-1056 is a use-after-free in Adobe Reader/Acrobat prior to 11.0.16, Acrobat/Reader DC Classic prior to 15.006.30172, and DC Continuous prior to 15.016.20039. Affects Windows and macOS; vectors are unspecified. Base impact is arbitrary code execution. Patches are available in the stated fi...
CVE-2016-1063
Technical details for CVE-2016-1063 are not publicly provided in the connected documents. The supplied sources do not specify affected products, versions, root cause, or remediation beyond the general description. Monitor for updates.
CVE-2016-1089
CVE-2016-1089 is a use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X. It allows attackers to execute arbitrary code via unspecifie...
CVE-2016-4201
Technical details for CVE-2016-4201 are not publicly available in the provided documents; no affected products, impact, or remediation specifics are disclosed here. Monitor for updates.
CVE-2017-11252
CVE-2017-11252 affects Adobe Acrobat Reader across multiple branches where the issue lies in the Adobe Graphics Manager (AGM) memory handling. Product versions affected include Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earli...
CVE-2017-2959
CVE-2017-2959 affects Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier. The vulnerability is an exploitable heap overflow in the image conversion engine, related to parsing of color profile metadata. Successful exploitation could lead to ar...
CVE-2017-3016
CVE-2017-3016 affects Adobe Acrobat family (Acrobat Reader DC/Classic/Continuous Track and related DC variants) with memory corruption leading to arbitrary code execution. Affected are multiple local builds: Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and...
CVE-2017-3039
CVE-2017-3039 affects Adobe Acrobat Reader (Windows/macOS) where memory corruption in the PPKLite security handler could allow arbitrary code execution. Affected versions include Acrobat Reader 11.0.19 and earlier; 15.006.30280 and earlier; and 15.023.20070 and earlier. The vulnerability descript...
CVE-2017-3045
CVE-2017-3045 affects Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and earlier, and 15.023.20070 and earlier, where a memory address leak exists in the JPEG 2000 parser (palette box). The vulnerability is due to improper handling of memory in the parser, enabling a leak that could aid i...
CVE-2016-1048
CVE-2016-1048 is a use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X. It allows attackers to execute arbitrary code via unspecifie...
CVE-2017-11258
Technical details for CVE-2017-11258 (affected products, root cause, impact, remediation) are not publicly provided in the supplied documents. Monitor for updates from official advisories.
CVE-2017-2948
CVE-2017-2948 affects Adobe Acrobat/Reader (XFA engine). Affected: Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier. Root cause: exploitable buffer overflow/underflow in XFA engine leading to arbitrary code execution upon successful exploitation....
CVE-2017-2953
CVE-2017-2953 refers to memory corruption in the “image conversion” component when processing TIFF images in Adobe Acrobat/Reader. Affected products include Acrobat/Reader versions 11.0.18 and earlier, 15.006.30244 and earlier, and 15.020.20042 and earlier. Successful exploitation could result in...
CVE-2017-2962
CVE-2017-2962 : Adobe Acrobat Reader/Reader with versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier are affected by a type confusion vulnerability in the XSLT engine’s localization handling, which could lead to arbitrary code execution. Affected OSes include Wind...
CVE-2017-2964
CVE-2017-2964 affects Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier. The vulnerability is a memory corruption in the image conversion engine caused by parsing JPEG EXIF metadata, which could allow arbitrary code execution when a crafted ...
CVE-2017-2966
CVE-2017-2966 is an exploitable heap overflow in Adobe Acrobat Reader’s image conversion engine caused by parsing malformed TIFF segments. Affected products include Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier. The vulnerability can lea...
CVE-2017-3015
Technical details for CVE-2017-3015 are not publicly available in the provided documents. Monitor for updates.
CVE-2017-3029
CVE-2017-3029 is reported for Adobe Acrobat Reader and Acrobat in versions prior to: 11.0.19, 15.006.30280, and 15.023.20070, where a memory address leak occurs while handling a JPEG 2000 code-stream. The provided documents explicitly list this CVE among a set of related issues in various Acrobat...
CVE-2017-3030
CVE-2017-3030 affects Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, and 15.023.20070 and earlier. The issue is described as an exploitable memory corruption vulnerability in the AES module that could allow arbitrary code execution on successful exploitation. The ini...
CVE-2016-1041
Technical details for CVE-2016-1041 are not publicly provided in the supplied documents; no affected products, impact, or remediation details are included. Monitor for updates.
CVE-2016-1042
Technical details for CVE-2016-1042 are not publicly provided in the supplied documents; no concrete affected products, versions, or remediation are disclosed here. Monitor for official updates.
CVE-2016-1067
No technical details about CVE-2016-1067 are present in the connected documents; the provided sources do not specify affected products, impact, or remediation for this CVE.
CVE-2016-4251
CVE-2016-4251 affects Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X. It allows attackers to execute arbitrary code or cause a denial of service (memory corrup...
CVE-2016-6943
Technical details about CVE-2016-6943 are not provided in the supplied Connected documents. Please monitor for updates from Adobe advisories or security databases.
CVE-2017-2954
CVE-2017-2954 relates to Adobe Acrobat Reader. The vulnerability is a memory corruption issue in the Image Conversion component when handling malformed TIFF images, affecting versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier. Successful exploitation could lead t...
CVE-2017-2961
CVE-2017-2961 is a use-after-free vulnerability in the XFA engine of Adobe Acrobat/Reader. It affects Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier. The issue is related to validation functionality, and exploitation could lead to arbitra...
CVE-2017-3044
Adobe Acrobat Reader (Windows/macOS) affected versions: 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier, due to a memory corruption vulnerability in the JPEG 2000 engine tied to image scaling. Successful exploitation could allow arbitrary code execution with local access a...
CVE-2017-3047
CVE-2017-3047 affects Adobe Acrobat/Reader (versions 11.0.19 and earlier; 15.006.30280 and earlier; 15.023.20070 and earlier). Root cause: a use-after-free in the JavaScript engine’s annotation-related API, leading to arbitrary code execution. Impact is consistent with the advisory: potentially a...
CVE-2017-3065
Technical details for CVE-2017-3065 are not publicly available in the provided documents; monitor for updates.
CVE-2016-4206
Technical details for CVE-2016-4206 are not publicly available in the provided documents; monitor for updates.
CVE-2016-4215
CVE-2016-4215 affects Adobe Reader and Acrobat products on Windows and macOS, enabling bypass of JavaScript API execution restrictions. Affected are: Reader/Acrobat before 11.0.17, DC Classic before 15.006.30198, and DC Continuous before 15.017.20050. The Vector(s) are unspecified in the provided...
CVE-2016-4255
Adobe Reader/Acrobat affected by CVE-2016-4255 (Use-after-free) on Windows and OS X. Vulnerable components: Adobe Reader and Acrobat before 11.0.17; Acrobat/Reader DC Classic before 15.006.30198 and DC Continuous before 15.017.20050. Vulnerability allows arbitrary code execution via unspecified v...
CVE-2017-2944
Adobe Acrobat/Reader (Windows and macOS) versions affected: 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier. Vulnerability in the TIFF parsing path of the rendering engine that causes memory corruption, with exploitation potentially leading to arbitrary code execution. No ...
CVE-2017-2958
CVE-2017-2958 affects Adobe Acrobat/Reader. The connected sources confirm an exploitable use-after-free in the JavaScript engine present in versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier, enabling arbitrary code execution on successful exploitation. The issue...
CVE-2017-2963
CVE-2017-2963: Adobe Acrobat Reader/Acrobat prior to versions 15.020.20042, 15.006.30244, and 11.0.18 contain a memory corruption vulnerability in the image conversion engine related to TIFF color profile handling. Successful exploitation could lead to arbitrary code execution. Connected sources ...
CVE-2016-1049
This CVE-2016-1051 is referenced in Debian DLA-1161-1 for a Redis security update. The bulletin describes a Cross Protocol Scripting issue where certain HTTP-like strings could be mishandled by Redis, potentially enabling craftable input to affect processing. Debian patched Redis in the Wheezy br...
CVE-2016-4214
Technical details (affected products, vulnerable components, root cause, impact, or fixes) are not publicly available in the provided connected documents. Monitor for updates from official advisories.
CVE-2016-4252
Technical details for CVE-2016-4252 are not publicly available in the provided connected documents; monitor for updates from security advisories.
CVE-2016-6955
Technical details for CVE-2016-6955 are not provided in the connected documents. Available items include the general CVE description and EUVD entries mentioning malware; no concrete payloads, affected products, or fixes are disclosed. Monitor for updates.
CVE-2017-11257
Technical details for CVE-2017-11257 are not publicly available in the provided documents. Monitor for updates.
CVE-2017-2970
CVE-2017-2970 refers to an exploitable heap overflow in the XSLT engine of Adobe Acrobat Reader/Reader DC, related to template manipulation. Affected versions include: 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier. The confirmed impact is arbitrary code execution if ...
CVE-2017-3034
Summary (CVE-2017-3034) : Adobe Acrobat Reader versions 11.0.19 and earlier; 15.006.30280 and earlier; 15.023.20070 and earlier contain an exploitable integer overflow in the XML Forms Architecture (XFA) engine, related to layout functionality. Exploitation could lead to arbitrary code execution....
CVE-2016-1038
CVE-2016-1038 affects Adobe Reader/Acrobat before certain versions on Windows and OS X, where attackers can bypass JavaScript API execution restrictions via unspecified vectors. The issue is described as a distinct vulnerability from CVE-2016-1039, 1040, 1041, 1042, 1044, 1062, and 1117. Connecte...
CVE-2016-1040
Adobe Reader and Acrobat affected: versions prior to 11.0.16, 15.006.30172, or 15.016.20039 (Windows and macOS) are vulnerable to bypassing JavaScript API execution restrictions via unspecified vectors. This is a different vulnerability than CVE-2016-1038/1039/1041/1042/1044/1062/1117. Severity i...
CVE-2016-1058
Technical details for CVE-2016-1058 are not publicly available in the provided documents. No confirmed affected products, root cause, or remediation are described here. Monitor for updates from official advisories and connected sources.