CVE-2017-11240

Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable…

published May 19, 2018

CVSS
—
EPSS
6%
Percentile
93.5
In the wild
Unconfirmed
What it is

⚠️ A seemingly innocent out-of-bounds read is lurking in Adobe Acrobat and Reader! This vulnerability can lead to arbitrary code execution with just the wrong file. 😱 Think of it like a sneaky waiter who reads the wrong order from a table — they could end up serving you something completely wrong and deeply unsettled! This out-of-bounds read could let attackers execute code as if they were you. If exploited, an attacker could gain full control over your machine, executing commands or accessing sensitive information without your permission. It’s not just an inconvenience; it could be the gateway to a much more serious breach of your system's integrity!

Put simply

Think of it like a sneaky waiter who reads the wrong order from a table — they could end up serving you something completely wrong and deeply unsettled! This out-of-bounds read could let attackers execute code as if they were you. This vulnerability allows an attacker to exploit an out-of-bounds read, leading to arbitrary code execution in the context of the current user when certain malicious PDF files are opened. It affects multiple older versions of Adobe Acrobat and Reader.

What to do

If exploited, an attacker could gain full control over your machine, executing commands or accessing sensitive information without your permission. It’s not just an inconvenience; it could be the gateway to a much more serious breach of your system's integrity! To protect yourself, upgrade to the latest version of Adobe Acrobat and Reader immediately. Always ensure you're running the most recent patches to safeguard against vulnerabilities like this. Regularly audit your software to catch such issues early! You’ve got this! Follow these steps and you’ll have your Adobe applications secured in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06208 · 93.5th percentile
Published
2018-05-19T17:00Z
EPSS history
Timeline
  • 19 MAY 17:00Z
    Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable…
    cvelistv5