Vulnerability Description
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This issue is due to an untrusted pointer dereference. In this scenario, the input is crafted in way that the computation results in pointers to memory locations that do not belong to the relevant process address space. The dereferencing operation is a read operation, and an attack can result in sensitive data exposure.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Acrobat | <= 11.0.22 |
| Adobe | Acrobat Dc | >= -, <= 17.012.20098 |
| Adobe | Acrobat Reader | <= 11.0.22 |
| Adobe | Acrobat Reader Dc | >= -, <= 17.012.20098 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/101813Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039791Third Party AdvisoryVDB Entry
- https://helpx.adobe.com/security/products/acrobat/apsb17-36.htmlVendor Advisory
- http://www.securityfocus.com/bid/101813Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039791Third Party AdvisoryVDB Entry
- https://helpx.adobe.com/security/products/acrobat/apsb17-36.htmlVendor Advisory
FAQ
What is CVE-2017-16373?
CVE-2017-16373 is a vulnerability with a CVSS score of 8.8 (HIGH). An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. Th...
How severe is CVE-2017-16373?
CVE-2017-16373 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-16373?
Check the references section above for vendor advisories and patch information. Affected products include: Adobe Acrobat, Adobe Acrobat Dc, Adobe Acrobat Reader, Adobe Acrobat Reader Dc.