CVE-2017-11306

Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable…

published May 19, 2018

CVSS
—
EPSS
6%
Percentile
93.5
In the wild
Unconfirmed
What it is

⚡ A crafty out-of-bounds read in Adobe Acrobat could let an attacker execute code as if they were you! This means your document viewer might be the gateway to mischief. 🦸 Think of it like a waiter at a restaurant who accidentally serves someone else's meal, allowing a sneaky diner to swap out their dish for something much more dangerous! In this case, the attacker could make the program serve up their own instructions instead of yours. If exploited, this vulnerability could lead to arbitrary code execution, meaning the attacker can perform any action on your system with your privileges. This could allow them to steal sensitive information or even take control of your system. Absolutely devastating news for unsuspecting users!

Put simply

Think of it like a waiter at a restaurant who accidentally serves someone else's meal, allowing a sneaky diner to swap out their dish for something much more dangerous! In this case, the attacker could make the program serve up their own instructions instead of yours. The vulnerability stems from an out-of-bounds read condition in Adobe Acrobat and Reader, which allows attackers to access memory outside of the intended buffer. This leads to potential code execution in the context of the current user, which is a prime opportunity for malicious activities.

What to do

If exploited, this vulnerability could lead to arbitrary code execution, meaning the attacker can perform any action on your system with your privileges. This could allow them to steal sensitive information or even take control of your system. Absolutely devastating news for unsuspecting users! Update Adobe Acrobat and Reader to the latest versions, specifically ensuring you're running at least version 2017.012.20099 or later. It's also smart to regularly check for security updates and patches as they become available. You've got this! Stay vigilant, update your software, and you'll be safeguarding your digital space in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06208 · 93.5th percentile
Published
2018-05-19T17:00Z
EPSS history
Timeline
  • 19 MAY 17:00Z
    Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable…
    cvelistv5