CVE-2017-11210: Buffer Overflow
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the font parsing, where the font is embedded in the XML Paper Specification (XPS) file. Successful exploitation could lead to arbitrary code execution.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-11210?
CVE-2017-11210 is considered to have a critical severity due to its potential for exploitation via memory corruption.
How do I fix CVE-2017-11210?
To fix CVE-2017-11210, users should update Adobe Acrobat Reader or Adobe Acrobat to the latest version released by Adobe.
Is my software vulnerable to CVE-2017-11210?
Affected software versions for CVE-2017-11210 include Adobe Acrobat Reader versions up to 11.0.20 and various 2015 and 2017 editions.
What types of attacks can exploit CVE-2017-11210?
CVE-2017-11210 can be exploited through crafted XPS files containing malicious fonts that trigger memory corruption.
Are there any known exploits for CVE-2017-11210?
Yes, there are known exploits for CVE-2017-11210 that can lead to arbitrary code execution if successful.