CVE-2017-16367: Incorrect Type Cast
First published: Sat Dec 09 2017(Updated: )
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a type confusion overflow vulnerability. The vulnerability leads to an out of bounds memory access. Attackers can exploit the vulnerability by using the out of bounds access for unintended reads or writes -- potentially leading to code corruption, control-flow hijack, or an information leak attack.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Acrobat Reader | <=11.0.22 | |
| Adobe Acrobat Reader | >=17.0<=17.011.30066 | |
| Adobe Acrobat Dc | >=-<=17.012.20098 | |
| Adobe Acrobat Dc | >=15.0<=15.006.30355 | |
| Adobe Acrobat Reader | <=11.0.22 | |
| Adobe Acrobat Reader | >=17.0<=17.011.30066 | |
| Adobe Acrobat Reader DC | >=-<=17.012.20098 | |
| Adobe Acrobat Reader DC | >=15.0<=15.006.30355 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/first-publish-date
- agent/last-modified-date
- agent/type
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/adobe
- canonical/adobe acrobat reader
- version/adobe acrobat reader/11.0.22
- version/adobe acrobat reader/17.0
- version/adobe acrobat reader/17.011.30066
- canonical/adobe acrobat dc
- version/adobe acrobat dc/-
- version/adobe acrobat dc/17.012.20098
- version/adobe acrobat dc/15.0
- version/adobe acrobat dc/15.006.30355
- canonical/adobe acrobat reader dc
- version/adobe acrobat reader dc/-
- version/adobe acrobat reader dc/17.012.20098
- version/adobe acrobat reader dc/15.0
- version/adobe acrobat reader dc/15.006.30355