CVE-2017-16371: Buffer Overflow
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This issue is due to an untrusted pointer dereference in the JavaScript engine. In this scenario, the input is crafted in a way that the computation results in pointers to memory locations that do not belong to the relevant process address space. The dereferencing operation is a read operation, and an attack can result in sensitive data exposure.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-16371?
The severity of CVE-2017-16371 is classified as critical due to its potential for exploitation via untrusted pointer dereference in Adobe Acrobat and Reader.
How do I fix CVE-2017-16371?
To fix CVE-2017-16371, users should update Adobe Acrobat and Reader to the latest version that addresses this vulnerability.
What versions are affected by CVE-2017-16371?
CVE-2017-16371 affects Adobe Acrobat and Reader versions including 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.
Can CVE-2017-16371 be exploited remotely?
Yes, CVE-2017-16371 can potentially be exploited remotely through maliciously crafted PDF documents.
What safeguards can I implement against CVE-2017-16371?
To safeguard against CVE-2017-16371, users should avoid opening untrusted PDF files and ensure regular updates of Adobe products to mitigate vulnerabilities.