CVE-2017-2949: vulnerability in Adobe Acrobat Reader 15.020.20042 and earlier…
Published · Updated
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 20%
exploitation probability
20%top 3% of all CVEs
observed exploitation
nono source reports it
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability in the XSLT engine. Successful exploitation could lead to arbitrary code execution.
Affected products
n/a · Adobe Acrobat Reader 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier.References
https://helpx.adobe.com/security/products/acrobat/apsb17-01.htmlhttp://www.securityfocus.com/bid/95344http://www.securitytracker.com/id/1037574http://www.zerodayinitiative.com/advisories/ZDI-17-005http://www.zerodayinitiative.com/advisories/ZDI-17-006http://www.zerodayinitiative.com/advisories/ZDI-17-007http://www.zerodayinitiative.com/advisories/ZDI-17-008http://www.zerodayinitiative.com/advisories/ZDI-17-009http://www.zerodayinitiative.com/advisories/ZDI-17-011http://www.zerodayinitiative.com/advisories/ZDI-17-012http://www.zerodayinitiative.com/advisories/ZDI-17-013http://www.zerodayinitiative.com/advisories/ZDI-17-015