CVE-2017-16363: Critical severity adobe acrobat reader vulnerability
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the module that handles character codes for certain textual representations. Invalid input leads to a computation where the pointer arithmetic results in a location outside valid memory locations belonging to the buffer. An attack can be used to obtain sensitive information, such as object heap addresses, etc.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-16363?
CVE-2017-16363 has a critical severity level as it involves a buffer over-read that can lead to potential information disclosure.
How do I fix CVE-2017-16363?
To fix CVE-2017-16363, users should update Adobe Acrobat and Reader to the latest version that addresses the vulnerability.
Which versions of Adobe Acrobat are affected by CVE-2017-16363?
CVE-2017-16363 affects Adobe Acrobat and Reader versions prior to 2017.012.20098, 2017.011.30066, 2015.006.30355, and 11.0.22.
What type of vulnerability is CVE-2017-16363?
CVE-2017-16363 is a buffer over-read vulnerability in Adobe Acrobat and Reader software.
Can CVE-2017-16363 lead to any security risks?
Yes, CVE-2017-16363 can lead to information disclosure risks, allowing attackers to access sensitive data.