First published: Wed Apr 12 2017(Updated: )
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable integer overflow vulnerability in the CCITT fax PDF filter. Successful exploitation could lead to arbitrary code execution.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Acrobat Reader | <=11.0.19 | |
Adobe Acrobat Reader DC | <=15.006.30280 | |
Adobe Acrobat Reader DC | <=15.023.20070 | |
Adobe Acrobat Reader | <=15.006.30280 | |
Adobe Acrobat Reader | <=15.023.20070 | |
Adobe Acrobat Reader | <=11.0.19 | |
Apple iOS and macOS | ||
Microsoft Windows Operating System |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-3011 has a critical severity rating due to its potential to allow arbitrary code execution.
To mitigate CVE-2017-3011, users should update to the latest version of Adobe Acrobat Reader or Adobe Acrobat DC.
CVE-2017-3011 affects Adobe Acrobat Reader versions up to 11.0.19 and Adobe Acrobat DC versions up to 15.023.20070.
CVE-2017-3011 is an integer overflow vulnerability in the CCITT fax PDF filter.
Yes, successful exploitation of CVE-2017-3011 can occur remotely, potentially without user interaction.