CVE-2017-11218: Use After Free
First published: Fri Aug 11 2017(Updated: )
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in XFA event management. Successful exploitation could lead to arbitrary code execution.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Acrobat Reader | >=11.0.0<=11.0.20 | |
| Adobe Acrobat Reader | >=17.011.00000<=17.011.30066 | |
| Adobe Acrobat DC | >=15.006.30060<=15.006.30306 | |
| Adobe Acrobat DC | >=15.007.20033<=17.009.20058 | |
| Adobe Acrobat Reader | >=17.011.00000<=17.011.30066 | |
| Adobe Acrobat DC | >=15.006.30060<=15.006.30306 | |
| Adobe Acrobat DC | >=15.007.20033<=17.009.20058 | |
| Adobe Acrobat Reader | >=11.0.0<=11.0.20 | |
| macOS Yosemite | ||
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-11218?
CVE-2017-11218 has a severity rating that could allow arbitrary code execution making it critically serious.
How do I fix CVE-2017-11218?
To fix CVE-2017-11218, update Adobe Acrobat Reader and Adobe Acrobat DC to the latest version provided by Adobe.
What software is affected by CVE-2017-11218?
CVE-2017-11218 affects Adobe Acrobat Reader and Adobe Acrobat DC versions earlier than specified thresholds.
Can CVE-2017-11218 be exploited remotely?
Yes, CVE-2017-11218 can potentially be exploited remotely due to its nature of arbitrary code execution.
What is the cause of CVE-2017-11218?
CVE-2017-11218 is caused by a use after free vulnerability in the XFA event management process.
- agent/references
- agent/type
- agent/severity
- agent/remedy
- agent/weakness
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/adobe
- canonical/adobe acrobat reader
- version/adobe acrobat reader/11.0.0
- version/adobe acrobat reader/11.0.20
- version/adobe acrobat reader/17.011.00000
- version/adobe acrobat reader/17.011.30066
- canonical/adobe acrobat dc
- version/adobe acrobat dc/15.006.30060
- version/adobe acrobat dc/15.006.30306
- version/adobe acrobat dc/15.007.20033
- version/adobe acrobat dc/17.009.20058
- vendor/apple
- canonical/macos yosemite
- vendor/microsoft
- canonical/microsoft windows