CVE-2017-11293

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier…

published December 9, 2017

CVSS
—
EPSS
9%
Percentile
95.3
In the wild
Unconfirmed
What it is

🚨 A memory corruption vulnerability in Adobe Acrobat could let attackers execute code just by opening a rogue PDF! 🔥 Think of it as a chef who accidentally pours salt into the dessert instead of sugar — it completely ruins the dish! In this case, the vulnerable memory can be manipulated to execute unexpected instructions, leading to potentially harmful outcomes. An attacker could craft a malicious PDF that, when opened, could execute arbitrary code on your system. This means they could take control of your device, steal sensitive information, or cause significant damage — a truly terrifying scenario for anyone who relies on Adobe Acrobat!

Put simply

Think of it as a chef who accidentally pours salt into the dessert instead of sugar — it completely ruins the dish! In this case, the vulnerable memory can be manipulated to execute unexpected instructions, leading to potentially harmful outcomes. This vulnerability exists due to memory corruption in Adobe Acrobat and Reader, affecting versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier. Successful exploitation could allow an attacker to run arbitrary code on the affected machines.

What to do

An attacker could craft a malicious PDF that, when opened, could execute arbitrary code on your system. This means they could take control of your device, steal sensitive information, or cause significant damage — a truly terrifying scenario for anyone who relies on Adobe Acrobat! Update Adobe Acrobat and Reader to the latest versions immediately to patch this vulnerability. Regularly check for updates to ensure you're protected against emerging threats. Be cautious about opening PDFs from untrusted sources! You've got this! Stay vigilant and keep your software updated to defend against these sneaky vulnerabilities! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09086 · 95.3th percentile
Published
2017-12-09T06:00Z
EPSS history
Timeline
  • 09 DEC 06:00Z
    An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier…
    cvelistv5