First published: Wed Apr 12 2017(Updated: )
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable heap overflow vulnerability in image conversion, related to parsing offsets in TIFF files. Successful exploitation could lead to arbitrary code execution.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Acrobat Reader | <=11.0.19 | |
Adobe Acrobat DC | <=15.006.30280 | |
Adobe Acrobat DC | <=15.023.20070 | |
Adobe Acrobat DC | <=15.006.30280 | |
Adobe Acrobat DC | <=15.023.20070 | |
Adobe Acrobat Reader | <=11.0.19 | |
macOS Yosemite | ||
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-3042 is considered a critical severity vulnerability that can lead to arbitrary code execution.
To fix CVE-2017-3042, upgrade Adobe Acrobat Reader to the latest version that is not vulnerable.
CVE-2017-3042 affects Adobe Acrobat Reader versions 11.0.19 and earlier, and versions of Acrobat DC prior to 15.006.30280 and 15.023.20070.
CVE-2017-3042 can be exploited through crafted TIFF files during image conversion processes.
No, CVE-2017-3042 does not affect macOS Yosemite as it is related specifically to vulnerable versions of Adobe Acrobat.