CVE-2017-16396: Buffer Overflow
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer access with an incorrect length value in the TIFF processing module. Crafted input causes a mismatch between allocated buffer size and the access allowed by the computation. If an attacker can adequately control the accessible memory then this vulnerability can be leveraged to achieve arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-16396?
CVE-2017-16396 is rated as important due to its potential to allow an attacker to execute arbitrary code.
How do I fix CVE-2017-16396?
To fix CVE-2017-16396, update Adobe Acrobat and Reader to the latest version released by Adobe.
What versions of Adobe products are affected by CVE-2017-16396?
CVE-2017-16396 affects Adobe Acrobat versions 11.0.22 and earlier, 2015.006.30355 and earlier, 2017.011.30066 and earlier, and all versions of Acrobat DC prior to 2017.012.20098.
What type of vulnerability is CVE-2017-16396?
CVE-2017-16396 is a buffer access vulnerability that can be exploited during TIFF file processing.
Can CVE-2017-16396 be exploited remotely?
Yes, CVE-2017-16396 can be exploited remotely by sending a specially crafted TIFF file to the target.