CVE-2017-11209
medium · 6.5Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability that occurs when reading a JPEG file embedded within XML Paper Specification (XPS) file. Successful exploitation could lead to arbitrary code execution.
6.5
CVSS
11.5%
EPSS (exploit prob.)
96th
EPSS percentile
2017-08-11
Published
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Weaknesses
CWE-119
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| adobe | acrobat | >= 11.0.0, <= 11.0.20 |
| adobe | acrobat | >= 17.011.00000, <= 17.011.30066 |
| adobe | acrobat_dc | >= 15.006.30060, <= 15.006.30306 |
| adobe | acrobat_dc | >= 15.007.20033, <= 17.009.20058 |
| adobe | acrobat_reader | >= 17.011.00000, <= 17.011.30066 |
| adobe | acrobat_reader_dc | >= 15.006.30060, <= 15.006.30306 |
| adobe | acrobat_reader_dc | >= 15.007.20033, <= 17.009.20058 |
| adobe | reader | >= 11.0.0, <= 11.0.20 |
| apple | mac_os_x | all versions |
| microsoft | windows | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://www.securityfocus.com/bid/100184
- http://www.securitytracker.com/id/1039098
- https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
- http://www.zerodayinitiative.com/advisories/ZDI-17-577/
- http://www.securityfocus.com/bid/100184
- http://www.securitytracker.com/id/1039098
- https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2017-11209