CVE-2017-16407: Critical severity adobe acrobat reader vulnerability
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a computation that writes data past the end of the intended buffer; the computation is part of handling an EMF EMRBITBLT record. The vulnerability is a result of an out of range pointer offset that is used to access sub-elements of an internal data structure. An attacker can potentially leverage the vulnerability to corrupt sensitive data or execute arbitrary code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-16407?
CVE-2017-16407 has a high severity level due to its potential to cause memory corruption, which could lead to arbitrary code execution.
How do I fix CVE-2017-16407?
To fix CVE-2017-16407, update Adobe Acrobat and Reader to the latest version available from Adobe.
Which versions of Adobe Acrobat are affected by CVE-2017-16407?
CVE-2017-16407 affects Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.
Can CVE-2017-16407 be exploited remotely?
Yes, CVE-2017-16407 can potentially be exploited remotely through maliciously crafted PDF files.
What impact can CVE-2017-16407 have on systems?
CVE-2017-16407 can lead to crashes, data leaks, or arbitrary code execution which may compromise the affected system.