CVE-2017-11307

Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable…

published May 19, 2018

CVSS
—
EPSS
6%
Percentile
93.5
In the wild
Unconfirmed
What it is

⚠️ An out-of-bounds read vulnerability in Adobe Acrobat could let attackers execute arbitrary code on your system. That's like finding a hidden room in your house and discovering someone has moved in without your permission! 😳 Think of it as a delivery driver taking a wrong turn and stumbling into your backyard, where they can see everything inside without you even knowing they're there. If exploited, this bug gives attackers that kind of sneaky access! 📦 If successfully exploited, an attacker could run any code within the permissions of the current user, leading to unauthorized actions like data theft or system compromise. This could be absolutely devastating if someone has access to sensitive information or critical systems!

Put simply

Think of it as a delivery driver taking a wrong turn and stumbling into your backyard, where they can see everything inside without you even knowing they're there. If exploited, this bug gives attackers that kind of sneaky access! 📦 This out-of-bounds read vulnerability allows attackers to read beyond the intended memory boundaries, potentially leading to arbitrary code execution. It affects Adobe Acrobat and Reader versions up to 2017.012.20098 and earlier, making it crucial to address this flaw.

What to do

If successfully exploited, an attacker could run any code within the permissions of the current user, leading to unauthorized actions like data theft or system compromise. This could be absolutely devastating if someone has access to sensitive information or critical systems! To mitigate this vulnerability, update Adobe Acrobat and Reader to the latest versions immediately. Check for updates regularly and consider implementing additional security measures to restrict unauthorized code execution. You've got this! With a quick update, you'll have your system secured in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06208 · 93.5th percentile
Published
2018-05-19T17:00Z
EPSS history
Timeline
  • 19 MAY 17:00Z
    Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable…
    cvelistv5