CVE-2017-11218: Use After Free

Q: What is the severity of CVE-2017-11218?

CVE-2017-11218 has a severity rating that could allow arbitrary code execution making it critically serious.

Q: How do I fix CVE-2017-11218?

To fix CVE-2017-11218, update Adobe Acrobat Reader and Adobe Acrobat DC to the latest version provided by Adobe.

Q: What software is affected by CVE-2017-11218?

CVE-2017-11218 affects Adobe Acrobat Reader and Adobe Acrobat DC versions earlier than specified thresholds.

Q: Can CVE-2017-11218 be exploited remotely?

Yes, CVE-2017-11218 can potentially be exploited remotely due to its nature of arbitrary code execution.

Q: What is the cause of CVE-2017-11218?

CVE-2017-11218 is caused by a use after free vulnerability in the XFA event management process.

Published Aug 11, 2017

Updated

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in XFA event management. Successful exploitation could lead to arbitrary code execution.

Affected Software

10 affected components

Adobe Acrobat>=11.0.0<=11.0.20

Adobe Acrobat>=17.011.00000<=17.011.30066

Adobe Acrobat DC>=15.006.30060<=15.006.30306

Adobe Acrobat DC>=15.007.20033<=17.009.20058

Adobe Acrobat Reader>=17.011.00000<=17.011.30066

Adobe Acrobat Reader DC>=15.006.30060<=15.006.30306

Adobe Acrobat Reader DC>=15.007.20033<=17.009.20058

Adobe Reader>=11.0.0<=11.0.20

Apple iOS and macOS

Microsoft Windows

Remediation

Patch Available

https://helpx.adobe.com/security/products/acrobat/apsb17-24.html

Event History

Aug 11, 2017

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-11218?

CVE-2017-11218 has a severity rating that could allow arbitrary code execution making it critically serious.

How do I fix CVE-2017-11218?