CVE-2017-2961: Use After Free
First published: Wed Jan 11 2017(Updated: )
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the XFA engine, related to validation functionality. Successful exploitation could lead to arbitrary code execution.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Acrobat Reader | <=11.0.18 | |
| Adobe Acrobat DC | <=15.006.30244 | |
| Adobe Acrobat DC | <=15.020.20042 | |
| Adobe Acrobat DC | <=15.006.30244 | |
| Adobe Acrobat DC | <=15.020.20042 | |
| Adobe Acrobat Reader | <=11.0.18 | |
| macOS Yosemite | ||
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-2961?
CVE-2017-2961 is classified as a critical vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2017-2961?
To fix CVE-2017-2961, update Adobe Acrobat Reader and Acrobat DC to versions later than 15.020.20042 and 11.0.18.
What software is affected by CVE-2017-2961?
CVE-2017-2961 affects Adobe Acrobat Reader versions 11.0.18 and earlier, and Adobe Acrobat DC versions 15.006.30244 and 15.020.20042 and earlier.
Can CVE-2017-2961 be exploited remotely?
Yes, CVE-2017-2961 can be exploited remotely, allowing attackers to execute arbitrary code.
What are the potential impacts of CVE-2017-2961?
Exploitation of CVE-2017-2961 can lead to arbitrary code execution on the affected system.
- agent/references
- agent/remedy
- agent/severity
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/type
- agent/description
- agent/first-publish-date
- agent/event
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/adobe
- canonical/adobe acrobat reader
- version/adobe acrobat reader/11.0.18
- canonical/adobe acrobat dc
- version/adobe acrobat dc/15.006.30244
- version/adobe acrobat dc/15.020.20042
- vendor/apple
- canonical/macos yosemite
- vendor/microsoft
- canonical/microsoft windows