CVE-2017-16413: Critical severity adobe acrobat reader vulnerability
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a computation that writes data past the end of the intended buffer; the computation is part of the XPS to PDF conversion module, when processing TIFF files. The vulnerability is a result of an out of range pointer offset that is used to access sub-elements of an internal data structure. An attacker can potentially leverage the vulnerability to corrupt sensitive data or execute arbitrary code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-16413?
CVE-2017-16413 is rated as critical, as it can lead to arbitrary code execution.
How do I fix CVE-2017-16413?
To fix CVE-2017-16413, update your Adobe Acrobat or Reader to the latest version provided by Adobe.
What are the affected versions for CVE-2017-16413?
CVE-2017-16413 affects Adobe Acrobat and Reader versions 11.0.22 and earlier, 2015.006.30355 and earlier, 2017.011.30066 and earlier, and 2017.012.20098 and earlier.
What types of vulnerabilities are associated with CVE-2017-16413?
CVE-2017-16413 involves a buffer overflow vulnerability that can allow attackers to execute arbitrary code.
How can I determine if I am vulnerable to CVE-2017-16413?
You can determine your vulnerability to CVE-2017-16413 by checking if your Adobe Acrobat or Reader version matches any of the affected versions.