CVE-2017-3009: Buffer Overflow
First published: Fri Mar 31 2017(Updated: )
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable buffer overflow vulnerability in the JPEG2000 parser. Successful exploitation could lead to information disclosure.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Acrobat Reader | >=11.0.0<=11.0.18 | |
| Adobe Acrobat Reader DC | >=15.000.0000<=15.006.30244 | |
| Adobe Acrobat Reader DC | >=15.000.0000<=15.020.20042 | |
| Adobe Acrobat Reader | >=15.000.0000<=15.006.30244 | |
| Adobe Acrobat Reader | >=15.000.0000<=15.020.20042 | |
| Adobe Acrobat Reader | >=11.0.0<=11.0.18 | |
| macOS | ||
| Microsoft Windows Operating System |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-3009?
CVE-2017-3009 is considered a high severity vulnerability due to its potential for information disclosure.
How do I fix CVE-2017-3009?
To resolve CVE-2017-3009, users should update to the latest version of Adobe Acrobat or Adobe Reader that is not affected by this vulnerability.
Which versions of Adobe Acrobat are affected by CVE-2017-3009?
Adobe Acrobat versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier are affected by CVE-2017-3009.
What type of vulnerability is CVE-2017-3009?
CVE-2017-3009 is a buffer overflow vulnerability found in the JPEG2000 parser of Adobe Acrobat products.
Can CVE-2017-3009 be exploited remotely?
Yes, CVE-2017-3009 can be exploited remotely through maliciously crafted JPEG2000 files.
- agent/type
- agent/references
- agent/last-modified-date
- agent/first-publish-date
- agent/severity
- agent/author
- agent/weakness
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/adobe
- canonical/adobe acrobat reader
- version/adobe acrobat reader/11.0.0
- version/adobe acrobat reader/11.0.18
- canonical/adobe acrobat reader dc
- version/adobe acrobat reader dc/15.000.0000
- version/adobe acrobat reader dc/15.006.30244
- version/adobe acrobat reader dc/15.020.20042
- version/adobe acrobat reader/15.000.0000
- version/adobe acrobat reader/15.006.30244
- version/adobe acrobat reader/15.020.20042
- vendor/apple
- canonical/macos
- vendor/microsoft
- canonical/microsoft windows operating system