First published: Wed Apr 12 2017(Updated: )
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability related to internal object representation manipulation. Successful exploitation could lead to arbitrary code execution.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Acrobat Reader | <=11.0.19 | |
Adobe Acrobat DC | <=15.006.30280 | |
Adobe Acrobat DC | <=15.023.20070 | |
Adobe Acrobat DC | <=15.006.30280 | |
Adobe Acrobat DC | <=15.023.20070 | |
Adobe Acrobat Reader | <=11.0.19 | |
macOS Yosemite | ||
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-3025 has a high severity due to the potential for arbitrary code execution.
To fix CVE-2017-3025, update Adobe Acrobat Reader and Adobe Acrobat DC to the latest versions.
CVE-2017-3025 affects Adobe Acrobat Reader versions 11.0.19 and earlier and Adobe Acrobat DC versions 15.006.30280 and 15.023.20070 and earlier.
CVE-2017-3025 affects users running the specific versions of Adobe Acrobat on Windows and macOS.
Exploiting CVE-2017-3025 could lead to arbitrary code execution, allowing attackers to gain control over a vulnerable system.