CVE-2017-3115: Infoleak
Published Aug 11, 2017
·Updated
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an information disclosure vulnerability when handling links in a PDF document.
Affected Software
10 affected components
Adobe Acrobat>=11.0.0<11.0.21
Adobe Acrobat DC>=15.000.0000<15.006.30355
Adobe Acrobat DC>=17.000.0000<=17.011.30066
Adobe Acrobat DC>=17.000.0000<17.012.20098
Adobe Acrobat Reader DC>=15.000.0000<15.006.30355
Adobe Acrobat Reader DC>=17.000.0000<17.011.30066
Adobe Acrobat Reader DC>=17.000.0000<17.012.20098
Adobe Reader>=11.0.0<11.0.21
Apple iOS and macOS
Microsoft Windows
Remediation
Event History
Aug 11, 2017
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-3115?
CVE-2017-3115 is classified as a moderate severity information disclosure vulnerability.
2
How do I fix CVE-2017-3115?
To fix CVE-2017-3115, update Adobe Acrobat Reader to version 11.0.21 or later, or the corresponding updated versions of Acrobat DC.
3
What software is affected by CVE-2017-3115?
CVE-2017-3115 affects Adobe Acrobat Reader and all supported versions of Adobe Acrobat DC released before the specified patch version.
4
Can CVE-2017-3115 be exploited remotely?
Yes, CVE-2017-3115 can be exploited remotely through specially crafted PDF documents.
5
What types of vulnerabilities does CVE-2017-3115 involve?
CVE-2017-3115 involves an information disclosure vulnerability when handling links in PDF documents.