CVE-2017-16410: Out-of-bounds Read
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is a result of untrusted input that is used to calculate an array index; the calculation occurs in the image conversion module, when processing GIF files. The vulnerability leads to an operation that can write to a memory location that is outside of the memory addresses allocated for the data structure. The specific scenario leads to a write access to a memory location that does not belong to the relevant process address space.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-16410?
CVE-2017-16410 has been classified with critical severity due to potential exploitation leading to code execution.
How do I fix CVE-2017-16410?
To fix CVE-2017-16410, users should upgrade to the latest version of Adobe Acrobat or Reader that has addressed this vulnerability.
Which versions are affected by CVE-2017-16410?
CVE-2017-16410 affects Adobe Acrobat and Reader versions 11.0.22 and earlier, 2015.006.30355 and earlier, as well as 2017.011.30066 and earlier.
What type of vulnerability is CVE-2017-16410?
CVE-2017-16410 is a vulnerability caused by untrusted input being utilized to calculate an array index.
Can CVE-2017-16410 be exploited remotely?
Yes, CVE-2017-16410 can potentially be exploited remotely by delivering a specially crafted PDF file.