CVE-2017-2949: fallo en Adobe Acrobat Reader 15.020.20042 and earlier…
Publicada el · Actualizada el
8Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 20%
probabilidad de explotación
20%top 3% de las CVE
explotación observada
noninguna fuente lo reporta
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability in the XSLT engine. Successful exploitation could lead to arbitrary code execution.
Productos afectados
n/a · Adobe Acrobat Reader 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier.Referencias
https://helpx.adobe.com/security/products/acrobat/apsb17-01.htmlhttp://www.securityfocus.com/bid/95344http://www.securitytracker.com/id/1037574http://www.zerodayinitiative.com/advisories/ZDI-17-005http://www.zerodayinitiative.com/advisories/ZDI-17-006http://www.zerodayinitiative.com/advisories/ZDI-17-007http://www.zerodayinitiative.com/advisories/ZDI-17-008http://www.zerodayinitiative.com/advisories/ZDI-17-009http://www.zerodayinitiative.com/advisories/ZDI-17-011http://www.zerodayinitiative.com/advisories/ZDI-17-012http://www.zerodayinitiative.com/advisories/ZDI-17-013http://www.zerodayinitiative.com/advisories/ZDI-17-015