CVE-2017-3029: Buffer Overflow
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability when handling a JPEG 2000 code-stream.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Adobe Acrobat Readerto a version that resolves this vulnerability.Fixed in 11.0.19 - Upgrade
Upgrade
Adobe Acrobat Readerto a version that resolves this vulnerability.Fixed in 15.006.30280 - Upgrade
Upgrade
Adobe Acrobat Readerto a version that resolves this vulnerability.Fixed in 15.023.20070
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3029?
CVE-2017-3029 is rated as a critical vulnerability due to its potential to lead to memory address leaks in Adobe Acrobat products.
How do I fix CVE-2017-3029?
To fix CVE-2017-3029, you should upgrade to the latest version of Adobe Acrobat Reader or Acrobat DC that resolves this vulnerability.
Which versions are affected by CVE-2017-3029?
Adobe Acrobat Reader versions 11.0.19 and earlier, as well as various versions of Acrobat DC up to 15.006.30280 and 15.023.20070 are affected by CVE-2017-3029.
What types of security issues can CVE-2017-3029 cause?
CVE-2017-3029 can potentially lead to unauthorized information disclosure through memory address leaks.
Is there a workaround for CVE-2017-3029 if I cannot update?
There are no known effective workarounds for CVE-2017-3029, so updating to a patched version is the recommended solution.