CVE-2017-3046: Medium severity Adobe Acrobat vulnerability
Published Apr 12, 2017
·Updated
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the JPEG 2000 parser, related to contiguous code-stream parsing.
Affected Software
15 affected components
Adobe Acrobat<=11.0.19
Adobe Acrobat DC<=15.006.30280
Adobe Acrobat DC<=15.023.20070
Adobe Acrobat Reader DC<=15.006.30280
Adobe Acrobat Reader DC<=15.023.20070
Adobe Reader<=11.0.19
Apple iOS and macOS
Microsoft Windows
All of the following
Any of the following
Adobe Acrobat<=11.0.19
Adobe Acrobat DC<=15.006.30280
Adobe Acrobat DC<=15.023.20070
Adobe Acrobat Reader DC<=15.006.30280
Adobe Acrobat Reader DC<=15.023.20070
Adobe Reader<=11.0.19
Microsoft Windows
Event History
Apr 12, 2017
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
DescriptionWeakness
Data Sourced
via NVD·02:59 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-3046?
CVE-2017-3046 is considered a moderate severity vulnerability due to its potential for memory address leaks.
2
How do I fix CVE-2017-3046?
To fix CVE-2017-3046, update to the latest version of Adobe Acrobat Reader or Adobe Acrobat DC that addresses this vulnerability.
3
What systems are affected by CVE-2017-3046?
CVE-2017-3046 affects Adobe Acrobat Reader versions 11.0.19 and earlier, and specific versions of Adobe Acrobat DC.
4
What type of vulnerability is CVE-2017-3046?
CVE-2017-3046 is a memory address leak vulnerability found in the JPEG 2000 parser.
5
Can CVE-2017-3046 be exploited remotely?
Yes, CVE-2017-3046 can potentially be exploited remotely through specially crafted JPEG 2000 files.