First published: Wed Apr 12 2017(Updated: )
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in image conversion related to processing of the PCX (picture exchange) file format. Successful exploitation could lead to arbitrary code execution.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Acrobat Reader | <=11.0.19 | |
Adobe Acrobat Reader DC | <=15.006.30280 | |
Adobe Acrobat Reader DC | <=15.023.20070 | |
Adobe Acrobat Reader | <=15.006.30280 | |
Adobe Acrobat Reader | <=15.023.20070 | |
Adobe Acrobat Reader | <=11.0.19 | |
Apple iOS and macOS | ||
Microsoft Windows Operating System |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-3036 is classified as a critical vulnerability due to the potential for arbitrary code execution.
To fix CVE-2017-3036, update Adobe Acrobat Reader or Adobe Acrobat DC to the latest version available.
CVE-2017-3036 affects Adobe Acrobat Reader versions 11.0.19 and earlier and Adobe Acrobat DC versions up to 15.006.30280 and 15.023.20070.
CVE-2017-3036 is caused by a memory corruption vulnerability during image conversion when processing the PCX file format.
Yes, CVE-2017-3036 can be exploited remotely if a user opens a specially crafted PCX file.