CVE-2017-3037: Buffer Overflow
Published Apr 12, 2017
·Updated
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the JavaScript engine. Successful exploitation could lead to arbitrary code execution.
Affected Software
15 affected components
Adobe Acrobat<=11.0.19
Adobe Acrobat DC<=15.006.30280
Adobe Acrobat DC<=15.023.20070
Adobe Acrobat Reader DC<=15.006.30280
Adobe Acrobat Reader DC<=15.023.20070
Adobe Reader<=11.0.19
Apple iOS and macOS
Microsoft Windows
All of the following
Any of the following
Adobe Acrobat<=11.0.19
Adobe Acrobat DC<=15.006.30280
Adobe Acrobat DC<=15.023.20070
Adobe Acrobat Reader DC<=15.006.30280
Adobe Acrobat Reader DC<=15.023.20070
Adobe Reader<=11.0.19
Microsoft Windows
Event History
Apr 12, 2017
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
DescriptionWeakness
Data Sourced
via NVD·02:59 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-3037?
CVE-2017-3037 has a critical severity rating due to the potential for arbitrary code execution.
2
How do I fix CVE-2017-3037?
To fix CVE-2017-3037, update Adobe Acrobat Reader to version 11.0.20 or later, or update Acrobat DC to the latest version.
3
Which versions of Adobe Acrobat Reader are affected by CVE-2017-3037?
Adobe Acrobat Reader versions 11.0.19 and earlier are affected by CVE-2017-3037.
4
Can CVE-2017-3037 be exploited remotely?
Yes, CVE-2017-3037 can be exploited remotely through malicious PDFs.
5
What types of attacks can CVE-2017-3037 facilitate?
CVE-2017-3037 can facilitate memory corruption attacks leading to arbitrary code execution.