CVE-2017-11219: Use After Free

Q: What is the severity of CVE-2017-11219?

CVE-2017-11219 has a high severity rating due to its potential for arbitrary code execution.

Q: How do I fix CVE-2017-11219?

To fix CVE-2017-11219, update Adobe Acrobat Reader to the latest version provided by Adobe.

Q: What versions are affected by CVE-2017-11219?

CVE-2017-11219 affects Adobe Acrobat Reader versions 11.0.20 and earlier, 2017.009.20058 and earlier, and other specified versions.

Q: What type of vulnerability is CVE-2017-11219?

CVE-2017-11219 is a use after free vulnerability in the XFA rendering engine of Adobe Acrobat.

Q: What can happen if CVE-2017-11219 is exploited?

Successful exploitation of CVE-2017-11219 could allow an attacker to execute arbitrary code on the victim's machine.

Published Aug 11, 2017

Updated

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the XFA rendering engine. Successful exploitation could lead to arbitrary code execution.

Affected Software

10 affected components

Adobe Acrobat>=11.0.0<=11.0.20

Adobe Acrobat>=17.011.00000<=17.011.30066

Adobe Acrobat DC>=15.006.30060<=15.006.30306

Adobe Acrobat DC>=15.007.20033<=17.009.20058

Adobe Acrobat Reader>=17.011.00000<=17.011.30066

Adobe Acrobat Reader DC>=15.006.30060<=15.006.30306

Adobe Acrobat Reader DC>=15.007.20033<=17.009.20058

Adobe Reader>=11.0.0<=11.0.20

Apple iOS and macOS

Microsoft Windows

Remediation

Patch Available

https://helpx.adobe.com/security/products/acrobat/apsb17-24.html

Event History

Aug 11, 2017

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-11219?

CVE-2017-11219 has a high severity rating due to its potential for arbitrary code execution.

How do I fix CVE-2017-11219?