Acrobat

Source repositories

https://github.com/Adobe-Consulting-Services/acs-aem-commons

CVEs (2,231)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2017-3013	Adobe Inc. Acrobat	Hig	0.51	7.8	0.03	Apr 12, 2017	Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading (DLL hijacking) vulnerability in a DLL related to remote logging.
CVE-2017-3012	Adobe Inc. Acrobat	Hig	0.51	7.8	0.03	Apr 12, 2017	Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading (DLL hijacking) vulnerability in the OCR plugin.
CVE-2017-3011	Adobe Inc. Acrobat	Hig	0.51	7.8	0.08	Apr 12, 2017	Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable integer overflow vulnerability in the CCITT fax PDF filter. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2972	Adobe Inc. Acrobat	Hig	0.51	7.8	0.03	Jan 24, 2017	Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion module related to JPEG parsing. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2971	Adobe Inc. Acrobat	Hig	0.51	7.8	0.09	Jan 24, 2017	Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability in the JPEG decoder routine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2970	Adobe Inc. Acrobat	Hig	0.51	7.8	0.07	Jan 24, 2017	Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability in the XSLT engine related to template manipulation. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2967	Adobe Inc. Acrobat	Hig	0.51	7.8	0.03	Jan 11, 2017	Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the XFA engine related to a form's structure and organization. Successful exploitation could lead to arbitrary code…
CVE-2017-2965	Adobe Inc. Acrobat	Hig	0.51	7.8	0.03	Jan 11, 2017	Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to TIFF file parsing. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2964	Adobe Inc. Acrobat	Hig	0.51	7.8	0.03	Jan 11, 2017	Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to the parsing of JPEG EXIF metadata. Successful exploitation could lead to arbitrary…
CVE-2017-2963	Adobe Inc. Acrobat	Hig	0.51	7.8	0.04	Jan 11, 2017	Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to handling of the color profile in a TIFF file. Successful exploitation could lead…
CVE-2017-2962	Adobe Inc. Acrobat	Hig	0.51	7.8	0.10	Jan 11, 2017	Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable type confusion vulnerability in the XSLT engine related to localization functionality. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2961	Adobe Inc. Acrobat	Hig	0.51	7.8	0.04	Jan 11, 2017	Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the XFA engine, related to validation functionality. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2958	Adobe Inc. Acrobat	Hig	0.51	7.8	0.10	Jan 11, 2017	Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2957	Adobe Inc. Acrobat	Hig	0.51	7.8	0.04	Jan 11, 2017	Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine, related to collaboration functionality. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2956	Adobe Inc. Acrobat	Hig	0.51	7.8	0.04	Jan 11, 2017	Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine, related to manipulation of the navigation pane. Successful exploitation could lead to arbitrary code…
CVE-2017-2955	Adobe Inc. Acrobat	Hig	0.51	7.8	0.04	Jan 11, 2017	Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2954	Adobe Inc. Acrobat	Hig	0.51	7.8	0.03	Jan 11, 2017	Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion module when handling malformed TIFF images. Successful exploitation could lead to arbitrary code…
CVE-2017-2953	Adobe Inc. Acrobat	Hig	0.51	7.8	0.03	Jan 11, 2017	Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion module when processing a TIFF image. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2952	Adobe Inc. Acrobat	Hig	0.51	7.8	0.08	Jan 11, 2017	Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable buffer overflow / underflow vulnerability in the image conversion module related to parsing tags in TIFF files. Successful exploitation could lead to…
CVE-2017-2951	Adobe Inc. Acrobat	Hig	0.51	7.8	0.04	Jan 11, 2017	Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the XFA engine, related to sub-form functionality. Successful exploitation could lead to arbitrary code execution.

CVE-2017-3013HigApr 12, 2017
Adobe Inc.
Acrobat
risk 0.51cvss 7.8epss 0.03
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading (DLL hijacking) vulnerability in a DLL related to remote logging.
CVE-2017-3012HigApr 12, 2017
Adobe Inc.
Acrobat
risk 0.51cvss 7.8epss 0.03
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading (DLL hijacking) vulnerability in the OCR plugin.
CVE-2017-3011HigApr 12, 2017
Adobe Inc.
Acrobat
risk 0.51cvss 7.8epss 0.08
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable integer overflow vulnerability in the CCITT fax PDF filter. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2972HigJan 24, 2017
Adobe Inc.
Acrobat
risk 0.51cvss 7.8epss 0.03
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion module related to JPEG parsing. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2971HigJan 24, 2017
Adobe Inc.
Acrobat
risk 0.51cvss 7.8epss 0.09
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability in the JPEG decoder routine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2970HigJan 24, 2017
Adobe Inc.
Acrobat
risk 0.51cvss 7.8epss 0.07
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability in the XSLT engine related to template manipulation. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2967HigJan 11, 2017
Adobe Inc.
Acrobat
risk 0.51cvss 7.8epss 0.03
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the XFA engine related to a form's structure and organization. Successful exploitation could lead to arbitrary code…
CVE-2017-2965HigJan 11, 2017
Adobe Inc.
Acrobat
risk 0.51cvss 7.8epss 0.03
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to TIFF file parsing. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2964HigJan 11, 2017
Adobe Inc.
Acrobat
risk 0.51cvss 7.8epss 0.03
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to the parsing of JPEG EXIF metadata. Successful exploitation could lead to arbitrary…
CVE-2017-2963HigJan 11, 2017
Adobe Inc.
Acrobat
risk 0.51cvss 7.8epss 0.04
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to handling of the color profile in a TIFF file. Successful exploitation could lead…
CVE-2017-2962HigJan 11, 2017
Adobe Inc.
Acrobat
risk 0.51cvss 7.8epss 0.10
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable type confusion vulnerability in the XSLT engine related to localization functionality. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2961HigJan 11, 2017
Adobe Inc.
Acrobat
risk 0.51cvss 7.8epss 0.04
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the XFA engine, related to validation functionality. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2958HigJan 11, 2017
Adobe Inc.
Acrobat
risk 0.51cvss 7.8epss 0.10
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2957HigJan 11, 2017
Adobe Inc.
Acrobat
risk 0.51cvss 7.8epss 0.04
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine, related to collaboration functionality. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2956HigJan 11, 2017
Adobe Inc.
Acrobat
risk 0.51cvss 7.8epss 0.04
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine, related to manipulation of the navigation pane. Successful exploitation could lead to arbitrary code…
CVE-2017-2955HigJan 11, 2017
Adobe Inc.
Acrobat
risk 0.51cvss 7.8epss 0.04
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2954HigJan 11, 2017
Adobe Inc.
Acrobat
risk 0.51cvss 7.8epss 0.03
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion module when handling malformed TIFF images. Successful exploitation could lead to arbitrary code…
CVE-2017-2953HigJan 11, 2017
Adobe Inc.
Acrobat
risk 0.51cvss 7.8epss 0.03
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion module when processing a TIFF image. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2952HigJan 11, 2017
Adobe Inc.
Acrobat
risk 0.51cvss 7.8epss 0.08
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable buffer overflow / underflow vulnerability in the image conversion module related to parsing tags in TIFF files. Successful exploitation could lead to…
CVE-2017-2951HigJan 11, 2017
Adobe Inc.
Acrobat
risk 0.51cvss 7.8epss 0.04
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the XFA engine, related to sub-form functionality. Successful exploitation could lead to arbitrary code execution.

Page 56 of 112