CVE-2017-3012: High severity Adobe Acrobat vulnerability
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading (DLL hijacking) vulnerability in the OCR plugin.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Adobe Acrobat Reader OCR pluginto a version that resolves this vulnerability.Fixed in 11.0.19 and earlier - Upgrade
Upgrade
Adobe Acrobat Reader OCR pluginto a version that resolves this vulnerability.Fixed in 15.006.30280 and earlier - Upgrade
Upgrade
Adobe Acrobat Reader OCR pluginto a version that resolves this vulnerability.Fixed in 15.023.20070 and earlier
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3012?
CVE-2017-3012 has a severity rating of important due to its potential for exploitation through DLL hijacking.
How do I fix CVE-2017-3012?
To fix CVE-2017-3012, update Adobe Acrobat Reader or Acrobat DC to a version later than 11.0.19 and 15.023.20070.
What versions of Adobe Acrobat are affected by CVE-2017-3012?
Adobe Acrobat Reader versions 11.0.19 and earlier, as well as versions 15.006.30280 and 15.023.20070 of Acrobat DC are affected by CVE-2017-3012.
What type of vulnerability is CVE-2017-3012?
CVE-2017-3012 is an insecure library loading vulnerability also known as DLL hijacking.
What is the impact of CVE-2017-3012 on users?
The impact of CVE-2017-3012 allows an attacker to potentially execute arbitrary code on the affected system.