1. Home
  2. CVE Database
  3. CVE-2017-2945
HIGH · 7.8

CVE-2017-2945

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability when parsing TIFF image files. Successful exploita...

Vulnerability Description

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability when parsing TIFF image files. Successful exploitation could lead to arbitrary code execution.

CVSS Score

7.8

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
AdobeAcrobat<= 11.0.18
AdobeAcrobat Dc<= 15.006.30244
AdobeAcrobat Reader Dc<= 15.006.30244
AdobeReader<= 11.0.18
AppleMac Os XAll versions
MicrosoftWindowsAll versions

Related Weaknesses (CWE)

CWE-119

References

FAQ

What is CVE-2017-2945?

CVE-2017-2945 is a vulnerability with a CVSS score of 7.8 (HIGH). Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability when parsing TIFF image files. Successful exploita...

How severe is CVE-2017-2945?

CVE-2017-2945 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-2945?

Check the references section above for vendor advisories and patch information. Affected products include: Adobe Acrobat, Adobe Acrobat Dc, Adobe Acrobat Reader Dc, Adobe Reader, Apple Mac Os X.