CVE-2017-16404: Critical severity adobe acrobat reader vulnerability
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a computation that writes data past the end of the intended buffer; the computation is part of processing Enhanced Metafile Format Plus (EMF+). The vulnerability is a result of an out of range pointer offset that is used to access sub-elements of an internal data structure. An attacker can potentially leverage the vulnerability to corrupt sensitive data or execute arbitrary code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-16404?
CVE-2017-16404 is rated as a critical vulnerability that can lead to arbitrary code execution.
How do I fix CVE-2017-16404?
To fix CVE-2017-16404, update Adobe Acrobat and Reader to the latest version available from Adobe.
Which versions of Adobe software are affected by CVE-2017-16404?
CVE-2017-16404 affects Adobe Acrobat and Reader versions up to 11.0.22 and several earlier and current versions of Adobe Acrobat DC.
What type of vulnerability is CVE-2017-16404?
CVE-2017-16404 is a buffer overflow vulnerability that can potentially allow an attacker to execute arbitrary code.
Is it safe to continue using affected versions of Adobe Acrobat and Reader regarding CVE-2017-16404?
No, it is not safe to continue using affected versions as they can be exploited by attackers to gain unauthorized access or execute malicious code.