CVE-2017-16416: Critical severity adobe acrobat reader vulnerability
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a computation that writes data past the end of the intended buffer; the computation is part of the image conversion module that handles Enhanced Metafile Format Plus (EMF+) data. The vulnerability is a result of an out of range pointer offset that is used to access sub-elements of an internal data structure. An attacker can potentially leverage the vulnerability to corrupt sensitive data or execute arbitrary code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-16416?
CVE-2017-16416 has a critical severity rating due to the potential for arbitrary code execution.
How do I fix CVE-2017-16416?
To fix CVE-2017-16416, update Adobe Acrobat and Reader to the latest version available.
What versions are affected by CVE-2017-16416?
CVE-2017-16416 affects Adobe Acrobat and Reader versions 11.0.22 and earlier, among others.
Can CVE-2017-16416 cause data loss?
Yes, CVE-2017-16416 may lead to data loss if exploited, as it allows writing past the intended buffer.
What types of attacks can exploit CVE-2017-16416?
CVE-2017-16416 can be exploited via malicious PDF files that execute arbitrary code.