CVE-2017-16398

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier…

published December 9, 2017

CVSS
—
EPSS
9%
Percentile
95.3
In the wild
Unconfirmed
What it is

🚨 A crafty use after free vulnerability lurks in Adobe Acrobat and Reader, allowing attackers unintended access to memory! 🔥 Imagine a chef leaving a recipe book open while cooking. If they forget about an ingredient they already used and add something new, they might spoil the entire dish! In this case, the JavaScript engine mishandles old and new objects, creating a recipe for disaster. If an attacker successfully exploits this vulnerability, they could run arbitrary code on your system. This could lead to devastating outcomes, like taking control of your device, stealing sensitive information, or corrupting important files. That's a big risk for anyone relying on Adobe software!

Put simply

Imagine a chef leaving a recipe book open while cooking. If they forget about an ingredient they already used and add something new, they might spoil the entire dish! In this case, the JavaScript engine mishandles old and new objects, creating a recipe for disaster. This use after free vulnerability occurs when the JavaScript engine fails to properly manage memory between old and new objects, potentially allowing an attacker to gain unauthorized access and execute malicious code.

What to do

If an attacker successfully exploits this vulnerability, they could run arbitrary code on your system. This could lead to devastating outcomes, like taking control of your device, stealing sensitive information, or corrupting important files. That's a big risk for anyone relying on Adobe software! Update Adobe Acrobat and Reader to versions released after 2017.012.20098, 2017.011.30066, 2015.006.30355, and 11.0.22. Regularly check for updates to ensure you're protected against similar vulnerabilities in the future! You've got this! Take action now, and you'll keep your digital space safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09180 · 95.3th percentile
Published
2017-12-09T06:00Z
EPSS history
Timeline
  • 09 DEC 06:00Z
    An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier…
    cvelistv5