CVE-2017-11217: Buffer Overflow
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to drawing of Unicode text strings. Successful exploitation could lead to arbitrary code execution.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-11217?
CVE-2017-11217 is considered a critical memory corruption vulnerability that could allow attackers to execute arbitrary code.
How do I fix CVE-2017-11217?
To mitigate CVE-2017-11217, users should update Adobe Acrobat Reader and Adobe Acrobat DC to versions that are not vulnerable.
Which versions of Adobe Acrobat Reader are affected by CVE-2017-11217?
Affected versions of Adobe Acrobat Reader include 2017.009.20058 and earlier, 2017.008.30051 and earlier, and 11.0.20 and earlier.
Is Adobe Acrobat DC also affected by CVE-2017-11217?
Yes, Adobe Acrobat DC versions prior to 15.006.30306 and 17.009.20058 are affected by CVE-2017-11217.
What types of attacks leverage CVE-2017-11217?
CVE-2017-11217 can be exploited through malicious EMF files which may result in memory corruption leading to code execution.