6.5
CVE-2017-16419
- EPSS 2.83%
- Veröffentlicht 09.12.2017 06:29:02
- Zuletzt bearbeitet 20.04.2025 01:37:25
- Quelle psirt@adobe.com
- Teams Watchlist Login
- Unerledigt Login
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The issue is a stack exhaustion problem within the JavaScript API, where the computation does not correctly control the amount of recursion that can happen with respect to system resources.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Acrobat Dc SwEditioncontinuous Version >= - <= 17.012.20098
Adobe ≫ Acrobat Dc SwEditionclassic Version >= 15.0 <= 15.006.30355
Adobe ≫ Acrobat Reader Version <= 11.0.22
Adobe ≫ Acrobat Reader Version >= 17.0 <= 17.011.30066
Adobe ≫ Acrobat Reader Dc SwEditioncontinuous Version >= - <= 17.012.20098
Adobe ≫ Acrobat Reader Dc SwEditionclassic Version >= 15.0 <= 15.006.30355
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.83% | 0.849 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.5 | 2.8 | 3.6 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:N/A:P
|
CWE-674 Uncontrolled Recursion
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.