CVE-2017-3053
First published: Wed Apr 12 2017(Updated: )
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the image conversion engine, related to parsing of the APP13 segment in JPEG files.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Acrobat Reader | <=11.0.19 | |
| Adobe Acrobat Reader DC | <=15.006.30280 | |
| Adobe Acrobat Reader DC | <=15.023.20070 | |
| Adobe Acrobat Reader | <=15.006.30280 | |
| Adobe Acrobat Reader | <=15.023.20070 | |
| Adobe Acrobat Reader | <=11.0.19 | |
| Apple iOS and macOS | ||
| Microsoft Windows Operating System |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-3053?
CVE-2017-3053 has a moderate severity rating as it involves a memory address leak in Adobe Acrobat and Reader.
How do I fix CVE-2017-3053?
To fix CVE-2017-3053, update Adobe Acrobat Reader to version 11.0.20 or above, or ensure that Adobe Acrobat DC is updated to its latest version.
Which versions of Adobe Acrobat are affected by CVE-2017-3053?
CVE-2017-3053 affects Adobe Acrobat Reader versions 11.0.19 and earlier, and Adobe Acrobat DC versions 15.006.30280 and earlier, as well as 15.023.20070 and earlier.
What types of files are involved in CVE-2017-3053?
CVE-2017-3053 is related to the handling of JPEG files, specifically the APP13 segment during image conversion.
Is CVE-2017-3053 exploitable remotely?
CVE-2017-3053 may potentially be exploited remotely if a user opens a specially crafted JPEG file with a vulnerable version of Adobe Acrobat.
- agent/references
- agent/type
- agent/severity
- agent/weakness
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/adobe
- canonical/adobe acrobat reader
- version/adobe acrobat reader/11.0.19
- canonical/adobe acrobat reader dc
- version/adobe acrobat reader dc/15.006.30280
- version/adobe acrobat reader dc/15.023.20070
- version/adobe acrobat reader/15.006.30280
- version/adobe acrobat reader/15.023.20070
- vendor/apple
- canonical/apple ios and macos
- vendor/microsoft
- canonical/microsoft windows operating system