First published: Wed Apr 12 2017(Updated: )
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to parsing of GIF files. Successful exploitation could lead to arbitrary code execution.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Acrobat Reader | <=11.0.19 | |
Adobe Acrobat Reader DC | <=15.006.30280 | |
Adobe Acrobat Reader DC | <=15.023.20070 | |
Adobe Acrobat Reader | <=15.006.30280 | |
Adobe Acrobat Reader | <=15.023.20070 | |
Adobe Acrobat Reader | <=11.0.19 | |
Apple iOS and macOS | ||
Microsoft Windows Operating System |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-3050 has been classified with a high severity rating due to the potential for arbitrary code execution.
To fix CVE-2017-3050, users should update Adobe Acrobat Reader to the latest version that addresses this vulnerability.
CVE-2017-3050 affects Adobe Acrobat Reader versions 11.0.19 and earlier, along with several versions of Adobe Acrobat DC.
Exploitation of CVE-2017-3050 can allow attackers to execute arbitrary code through maliciously crafted GIF files.
Currently, the recommended approach is to update Adobe Acrobat Reader to the latest version as there aren't established workarounds for this vulnerability.