First published: Fri Aug 11 2017(Updated: )
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable type confusion vulnerability in the annotation functionality. Successful exploitation could lead to arbitrary code execution.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Acrobat Reader | >=11.0.0<=11.0.20 | |
Adobe Acrobat Reader | >=17.011.00000<=17.011.30066 | |
Adobe Acrobat Reader DC | >=15.006.30060<=15.006.30306 | |
Adobe Acrobat Reader DC | >=15.007.20033<=17.009.20058 | |
Adobe Acrobat Reader Notification Manager | >=17.011.00000<=17.011.30066 | |
Adobe Acrobat Reader | >=15.006.30060<=15.006.30306 | |
Adobe Acrobat Reader | >=15.007.20033<=17.009.20058 | |
Adobe Acrobat Reader | >=11.0.0<=11.0.20 | |
Apple iOS and macOS | ||
Microsoft Windows Operating System |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-11221 is rated as a critical vulnerability due to its potential for arbitrary code execution.
To fix CVE-2017-11221, update Adobe Acrobat Reader to version 2017.011.30066 or later.
CVE-2017-11221 affects Adobe Acrobat Reader versions 2017.009.20058 and earlier, 2017.008.30051 and earlier, and multiple versions of Adobe Acrobat DC.
Exploitation of CVE-2017-11221 could allow an attacker to execute arbitrary code on the affected system.
CVE-2017-11221 is primarily associated with Adobe Acrobat software and is not limited to any particular operating system.