CVE-2017-11224: Use After Free

Q: What is the severity of CVE-2017-11224?

CVE-2017-11224 is classified as a critical vulnerability that could lead to arbitrary code execution.

Q: How do I fix CVE-2017-11224?

To address CVE-2017-11224, users should update Adobe Acrobat Reader to the latest version available.

Q: Which versions are affected by CVE-2017-11224?

CVE-2017-11224 affects Adobe Acrobat and Reader versions up to 11.0.20 and various 2017 and 2015 series versions prior to their respective updates.

Q: What kind of vulnerability is CVE-2017-11224?

CVE-2017-11224 is a use-after-free vulnerability in the XFA layout engine of Adobe Acrobat.

Q: What could happen if CVE-2017-11224 is exploited?

Exploitation of CVE-2017-11224 could allow an attacker to execute arbitrary code on the affected system.

Published Aug 11, 2017

Updated

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the XFA layout engine. Successful exploitation could lead to arbitrary code execution.

Affected Software

10 affected components

Adobe Acrobat>=11.0.0<=11.0.20

Adobe Acrobat>=17.011.00000<=17.011.30066

Adobe Acrobat DC>=15.006.30060<=15.006.30306

Adobe Acrobat DC>=15.007.20033<=17.009.20058

Adobe Acrobat reader>=17.011.00000<=17.011.30066

Adobe Acrobat Reader DC>=15.006.30060<=15.006.30306

Adobe Acrobat Reader DC>=15.007.20033<=17.009.20058

Adobe Reader>=11.0.0<=11.0.20

Apple iOS and macOS

Microsoft Windows

Remediation

Patch Available

https://helpx.adobe.com/security/products/acrobat/apsb17-24.html

Event History

Aug 11, 2017

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-11224?

CVE-2017-11224 is classified as a critical vulnerability that could lead to arbitrary code execution.

How do I fix CVE-2017-11224?