CVE-2017-11214: Buffer Overflow
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to rendering a path. Successful exploitation could lead to arbitrary code execution.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-11214?
CVE-2017-11214 is classified as a critical memory corruption vulnerability that can lead to arbitrary code execution.
How do I fix CVE-2017-11214?
To fix CVE-2017-11214, update Adobe Acrobat Reader and Acrobat DC to the latest version.
What versions of Adobe products are affected by CVE-2017-11214?
CVE-2017-11214 affects Adobe Acrobat Reader versions 2017.009.20058 and earlier, Acrobat DC versions 15.006.30306 and earlier, and several other versions mentioned in the vulnerability details.
What types of attacks can exploit CVE-2017-11214?
CVE-2017-11214 can be exploited through specially crafted EMF files that may execute arbitrary code when processed by Adobe Acrobat products.
Can CVE-2017-11214 affect Mac users?
CVE-2017-11214 specifically affects vulnerable versions of Adobe Acrobat products; however, it requires exploitation of the affected software regardless of the operating system.