CVE-2017-16368: Buffer Overflow
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability leads to a stack-based buffer overflow condition in the internal Unicode string manipulation module. It is triggered by an invalid PDF file, where a crafted Unicode string causes an out of bounds memory access of a stack allocated buffer, due to improper checks when manipulating an offset of a pointer to the buffer. Attackers can exploit the vulnerability and achieve arbitrary code execution if they can effectively control the accessible memory.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-16368?
CVE-2017-16368 has been classified as a critical vulnerability due to its potential to allow arbitrary code execution.
How do I fix CVE-2017-16368?
To fix CVE-2017-16368, update Adobe Acrobat and Reader to the latest version available.
What versions are affected by CVE-2017-16368?
CVE-2017-16368 affects Adobe Acrobat and Reader versions prior to 2017.012.20098, 2017.011.30066, 2015.006.30355, and 11.0.22.
What are the impacts of CVE-2017-16368?
The impacts of CVE-2017-16368 include the possibility of a stack-based buffer overflow, allowing an attacker to execute arbitrary code.
Is there any workaround for CVE-2017-16368?
There are no specific workarounds for CVE-2017-16368, so applying the security updates is essential.