CVE-2017-16411: Buffer Overflow
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of the WebCapture module, related to an internal hash table implementation. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-16411?
CVE-2017-16411 has been rated as important severity due to its potential impact on user data.
Which versions of Adobe Acrobat are affected by CVE-2017-16411?
CVE-2017-16411 affects Adobe Acrobat and Reader versions 11.0.22 and earlier, as well as several versions in the 2015 and 2017 series.
How do I fix CVE-2017-16411?
To fix CVE-2017-16411, users should update Adobe Acrobat and Reader to the latest available version.
What type of vulnerability is CVE-2017-16411?
CVE-2017-16411 is a buffer overflow vulnerability that allows reading data beyond the end of allocated memory.
Can CVE-2017-16411 lead to data exposure?
Yes, CVE-2017-16411 can lead to information disclosure as it may allow an attacker to read sensitive data.