CVE-2017-11250

Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable…

published May 19, 2018

CVSS
—
EPSS
6%
Percentile
93.5
In the wild
Unconfirmed
What it is

⚠️ Beware of the sneaky out-of-bounds read lurking in Adobe Acrobat and Reader! This vulnerability can unwittingly allow attackers to execute arbitrary code in the context of the current user. 🔥 Think of this vulnerability like a misplaced invoice in a busy office — if someone accidentally picks it up, they could access sensitive information or potentially alter it without anyone realizing. It's a small oversight that can lead to big trouble! If exploited, this vulnerability could allow an attacker to execute any code they choose, giving them full control over the affected system. Imagine losing control of a locked filing cabinet because someone found a way to read the access codes without permission. The consequences could be catastrophic!

Put simply

Think of this vulnerability like a misplaced invoice in a busy office — if someone accidentally picks it up, they could access sensitive information or potentially alter it without anyone realizing. It's a small oversight that can lead to big trouble! This out-of-bounds read vulnerability in Adobe Acrobat and Reader allows attackers to read beyond the intended memory boundaries, potentially leading to arbitrary code execution. The affected versions include 2017.012.20098 and earlier, along with several others listed in the CVE.

What to do

If exploited, this vulnerability could allow an attacker to execute any code they choose, giving them full control over the affected system. Imagine losing control of a locked filing cabinet because someone found a way to read the access codes without permission. The consequences could be catastrophic! To protect yourself, upgrade Adobe Acrobat and Reader to the latest versions immediately. Regularly check for updates and consider implementing additional security measures, like restricting application permissions to limit potential damage. 🛡️ You've got this! By staying proactive and following these steps, you can safeguard your systems from this vulnerability. Keep up the great work! 💪😊

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06208 · 93.5th percentile
Published
2018-05-19T17:00Z
EPSS history
Timeline
  • 19 MAY 17:00Z
    Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable…
    cvelistv5