CVE-2017-2960: Buffer Overflow
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to parsing of EXIF metadata. Successful exploitation could lead to arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-2960?
CVE-2017-2960 is considered high severity due to the potential for arbitrary code execution.
How do I fix CVE-2017-2960?
To fix CVE-2017-2960, update Adobe Acrobat Reader or Acrobat DC to the latest version that is no longer vulnerable.
What impact does CVE-2017-2960 have on affected software?
CVE-2017-2960 allows attackers to execute arbitrary code on a user's system by exploiting a memory corruption vulnerability.
Which versions are affected by CVE-2017-2960?
CVE-2017-2960 affects Adobe Acrobat Reader versions up to 11.0.18 and Acrobat DC versions up to 15.020.20042 and 15.006.30244.
Is this vulnerability exploitable?
Yes, CVE-2017-2960 is exploitable through specially crafted image files that can trigger memory corruption.