CVE-2017-2961: Use After Free
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the XFA engine, related to validation functionality. Successful exploitation could lead to arbitrary code execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Adobe Acrobat Readerto a version that resolves this vulnerability.Fixed in 15.020.20042 - Upgrade
Upgrade
Adobe Acrobat Readerto a version that resolves this vulnerability.Fixed in 15.006.30244 - Upgrade
Upgrade
Adobe Acrobat Readerto a version that resolves this vulnerability.Fixed in 11.0.18
Event History
Frequently Asked Questions
What is the severity of CVE-2017-2961?
CVE-2017-2961 is classified as a critical vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2017-2961?
To fix CVE-2017-2961, update Adobe Acrobat Reader and Acrobat DC to versions later than 15.020.20042 and 11.0.18.
What software is affected by CVE-2017-2961?
CVE-2017-2961 affects Adobe Acrobat Reader versions 11.0.18 and earlier, and Adobe Acrobat DC versions 15.006.30244 and 15.020.20042 and earlier.
Can CVE-2017-2961 be exploited remotely?
Yes, CVE-2017-2961 can be exploited remotely, allowing attackers to execute arbitrary code.
What are the potential impacts of CVE-2017-2961?
Exploitation of CVE-2017-2961 can lead to arbitrary code execution on the affected system.