CVE-2017-16383: Buffer Overflow

Q: What is the severity of CVE-2017-16383?

CVE-2017-16383 has been classified with a critical severity rating due to its heap overflow vulnerability.

Q: How do I fix CVE-2017-16383?

To fix CVE-2017-16383, update Adobe Acrobat and Reader to the latest versions which address the vulnerability.

Q: Which versions are vulnerable to CVE-2017-16383?

Versions of Adobe Acrobat and Reader prior to 2017.012.20098, 2017.011.30066, 2015.006.30355, and 11.0.22 are vulnerable.

Q: What kind of vulnerability is CVE-2017-16383?

CVE-2017-16383 is a heap overflow vulnerability that can be exploited when processing a specially crafted JPEG file.

Q: What products are affected by CVE-2017-16383?

CVE-2017-16383 affects Adobe Acrobat and Reader including versions prior to 2017.012.20098 and others listed in the vulnerability details.

Published Dec 9, 2017

Updated

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a heap overflow vulnerability when processing a JPEG file embedded within an XPS document.

Affected Software

8 affected components

Adobe Acrobat<=11.0.22

Adobe Acrobat>=17.0<=17.011.30066

Adobe Acrobat Dc>=-<=17.012.20098

Adobe Acrobat Dc>=15.0<=15.006.30355

Adobe Acrobat reader<=11.0.22

Adobe Acrobat reader>=17.0<=17.011.30066

Adobe Acrobat Reader DC>=-<=17.012.20098

Adobe Acrobat Reader DC>=15.0<=15.006.30355

Event History

Dec 9, 2017

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-16383?

CVE-2017-16383 has been classified with a critical severity rating due to its heap overflow vulnerability.

How do I fix CVE-2017-16383?

To fix CVE-2017-16383, update Adobe Acrobat and Reader to the latest versions which address the vulnerability.

Which versions are vulnerable to CVE-2017-16383?