CVE-2017-3014: Use After Free
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vulnerability in XML Forms Architecture (XFA) related to reset form functionality. Successful exploitation could lead to arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3014?
CVE-2017-3014 is considered a high-severity vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2017-3014?
To fix CVE-2017-3014, update Adobe Acrobat Reader or Adobe Acrobat DC to versions later than those specified in the vulnerability description.
What versions are affected by CVE-2017-3014?
CVE-2017-3014 affects Adobe Acrobat Reader versions 11.0.19 and earlier, and Adobe Acrobat DC versions 15.006.30280 and earlier, as well as 15.023.20070 and earlier.
What is a use after free vulnerability as seen in CVE-2017-3014?
A use after free vulnerability, such as CVE-2017-3014, occurs when a program continues to use a pointer after the memory it points to has been freed, potentially allowing an attacker to execute arbitrary code.
Can CVE-2017-3014 be exploited remotely?
Yes, CVE-2017-3014 can potentially be exploited remotely if a user opens a malicious PDF file.