CVE-2017-11239: Buffer Overflow
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to text strings. Successful exploitation could lead to arbitrary code execution.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-11239?
CVE-2017-11239 is rated as having a critical severity level due to its potential to allow remote code execution.
How do I fix CVE-2017-11239?
To fix CVE-2017-11239, update Adobe Acrobat Reader to version 2017.011.30066 or later, or upgrade to Acrobat DC versions that are not vulnerable.
Which versions of Adobe Acrobat Reader are affected by CVE-2017-11239?
CVE-2017-11239 affects Adobe Acrobat Reader versions 2017.009.20058 and earlier, and 11.0.20 and earlier.
What types of attacks can exploit CVE-2017-11239?
CVE-2017-11239 can be exploited via specially crafted Enhanced Metafile Format (EMF) files.
Is there a workaround for CVE-2017-11239 if I cannot update Adobe Acrobat?
There are no official workarounds for CVE-2017-11239, so updating is the recommended approach to mitigate the risk.