CVE-2017-2940: Buffer Overflow
First published: Wed Jan 11 2017(Updated: )
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing JPEG 2000 files. Successful exploitation could lead to arbitrary code execution.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Acrobat Reader | <=11.0.18 | |
| Adobe Acrobat Reader DC | <=15.006.30244 | |
| Adobe Acrobat Reader DC | <=15.020.20042 | |
| Adobe Acrobat Reader | <=15.006.30244 | |
| Adobe Acrobat Reader | <=15.020.20042 | |
| Adobe Acrobat Reader | <=11.0.18 | |
| Apple iOS and macOS | ||
| Microsoft Windows Operating System | ||
| All of | ||
| Any of | ||
| Adobe Acrobat Reader | <=11.0.18 | |
| Adobe Acrobat Reader DC | <=15.006.30244 | |
| Adobe Acrobat Reader DC | <=15.020.20042 | |
| Adobe Acrobat Reader | <=15.006.30244 | |
| Adobe Acrobat Reader | <=15.020.20042 | |
| Adobe Acrobat Reader | <=11.0.18 | |
| Any of | ||
| Apple iOS and macOS | ||
| Microsoft Windows Operating System |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-2940?
CVE-2017-2940 has a critical severity rating due to its potential for arbitrary code execution.
How do I fix CVE-2017-2940?
To fix CVE-2017-2940, users should update Adobe Acrobat Reader to a version later than 15.020.20042 or 11.0.18.
What versions of Adobe Acrobat are affected by CVE-2017-2940?
CVE-2017-2940 affects Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier.
What kind of vulnerability is CVE-2017-2940?
CVE-2017-2940 is a memory corruption vulnerability that occurs during the processing of JPEG 2000 files.
Can CVE-2017-2940 be exploited remotely?
Yes, CVE-2017-2940 can be exploited remotely if a user opens a crafted JPEG 2000 file.
- agent/type
- agent/first-publish-date
- agent/remedy
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/description
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/event
- agent/tags
- vendor/adobe
- canonical/adobe acrobat reader
- version/adobe acrobat reader/11.0.18
- canonical/adobe acrobat reader dc
- version/adobe acrobat reader dc/15.006.30244
- version/adobe acrobat reader dc/15.020.20042
- version/adobe acrobat reader/15.006.30244
- version/adobe acrobat reader/15.020.20042
- vendor/apple
- canonical/apple ios and macos
- vendor/microsoft
- canonical/microsoft windows operating system