4.3

CVE-2017-3033

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability when handling JPEG 2000 code-stream tile data.

Data is provided by the National Vulnerability Database (NVD)
Adobe ≫ Acrobat Version <= 11.0.19
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Dc SwEditionclassic Version <= 15.006.30280
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Dc SwEditioncontinuous Version <= 15.023.20070
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Dc SwEditionclassic Version <= 15.006.30280
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Dc SwEditioncontinuous Version <= 15.023.20070
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Reader Version <= 11.0.19
   Apple ≫ macOS X
   Microsoft ≫ Windows
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.14% 0.777
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 3.3 1.8 1.4
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

http://www.securityfocus.com/bid/97554
Third Party Advisory
VDB Entry