10

CVE-2017-11308

Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Acrobat Version >= 11.0.0 <= 11.0.22
   Apple ≫ macOS Version -
   Microsoft ≫ Windows Version -
Adobe ≫ Acrobat Version >= 17.011.30066 < 17.011.30068
   Apple ≫ macOS Version -
   Microsoft ≫ Windows Version -
Adobe ≫ Acrobat Dc SwEdition classic Version >= 15.006.30355 < 15.006.30392
   Apple ≫ macOS Version -
   Microsoft ≫ Windows Version -
Adobe ≫ Acrobat Dc SwEdition continuous Version >= 17.012.20098 < 18.009.20044
   Apple ≫ macOS Version -
   Microsoft ≫ Windows Version -
Adobe ≫ Acrobat Reader Version >= 11.0.0 <= 11.0.22
   Apple ≫ macOS Version -
   Microsoft ≫ Windows Version -
Adobe ≫ Acrobat Reader Version >= 17.011.30066 < 17.011.30068
   Apple ≫ macOS Version -
   Microsoft ≫ Windows Version -
Adobe ≫ Acrobat Reader Dc SwEdition classic Version >= 15.006.30355 < 15.006.30392
   Apple ≫ macOS Version -
   Microsoft ≫ Windows Version -
Adobe ≫ Acrobat Reader Dc SwEdition continuous Version >= 17.012.20098 < 18.009.20044
   Apple ≫ macOS Version -
   Microsoft ≫ Windows Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 8.01% 0.94
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
Vendor Advisory