CVE-2017-3015: Buffer Overflow
First published: Wed Apr 12 2017(Updated: )
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the JBIG2 parsing functionality. Successful exploitation could lead to arbitrary code execution.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Acrobat Reader | <=11.0.19 | |
| Adobe Acrobat Reader DC | <=15.006.30280 | |
| Adobe Acrobat Reader DC | <=15.023.20070 | |
| Adobe Acrobat Reader | <=15.006.30280 | |
| Adobe Acrobat Reader | <=15.023.20070 | |
| Adobe Acrobat Reader | <=11.0.19 | |
| Apple iOS and macOS | ||
| Microsoft Windows Operating System |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-3015?
CVE-2017-3015 is considered a critical vulnerability that can lead to arbitrary code execution in Adobe Acrobat products.
How do I fix CVE-2017-3015?
To mitigate CVE-2017-3015, users should update Adobe Acrobat Reader and Adobe Acrobat DC to versions released after 15.023.20070 and 11.0.19.
Which versions of Adobe products are affected by CVE-2017-3015?
CVE-2017-3015 affects Adobe Acrobat Reader versions 11.0.19 and earlier, and Adobe Acrobat DC versions 15.006.30280 and earlier, and 15.023.20070 and earlier.
What exploitation potential does CVE-2017-3015 present?
Successful exploitation of CVE-2017-3015 can allow attackers to execute arbitrary code on the affected system, posing significant security risks.
Is Adobe Acrobat Reader on macOS vulnerable to CVE-2017-3015?
Adobe Acrobat Reader on macOS is vulnerable to CVE-2017-3015 if running versions affected as stated, but macOS itself does not contribute to this vulnerability.
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/severity
- agent/author
- agent/references
- agent/weakness
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/adobe
- canonical/adobe acrobat reader
- version/adobe acrobat reader/11.0.19
- canonical/adobe acrobat reader dc
- version/adobe acrobat reader dc/15.006.30280
- version/adobe acrobat reader dc/15.023.20070
- version/adobe acrobat reader/15.006.30280
- version/adobe acrobat reader/15.023.20070
- vendor/apple
- canonical/apple ios and macos
- vendor/microsoft
- canonical/microsoft windows operating system