CVE-2017-11253

Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable…

published May 19, 2018

CVSS
—
EPSS
6%
Percentile
93.5
In the wild
Unconfirmed
What it is

⚠️ An out-of-bounds read vulnerability in Adobe Acrobat and Reader could let attackers run code as the current user! 📄 Think of it like a waiter at a restaurant who accidentally hands you someone else's order, allowing you to add or change the meal without the chef knowing — it’s a recipe for disaster! If exploited, an attacker could gain control over your system, running malicious code that could lead to data theft or other harmful actions. Imagine having someone else in the driver’s seat while you’re just along for the ride!

Put simply

Think of it like a waiter at a restaurant who accidentally hands you someone else's order, allowing you to add or change the meal without the chef knowing — it’s a recipe for disaster! This vulnerability allows arbitrary code execution due to an out-of-bounds read, meaning the program reads data from an area of memory it shouldn't, potentially leading to unauthorized actions.

What to do

If exploited, an attacker could gain control over your system, running malicious code that could lead to data theft or other harmful actions. Imagine having someone else in the driver’s seat while you’re just along for the ride! Upgrade Adobe Acrobat and Reader to versions 2017.012.20099 or later, 2017.011.30067 or later, 2015.006.30356 or later, or 11.0.23 or later. Regularly check for updates to keep your software safe! You've got this! Stay vigilant and keep your systems updated to maintain security. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06208 · 93.5th percentile
Published
2018-05-19T17:00Z
EPSS history
Timeline
  • 19 MAY 17:00Z
    Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable…
    cvelistv5