CVE-2017-16414
Quick assessment
Affected
n/a Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Adobe Acrobat DC for Windows和Macintosh等都是美国奥多比（Adobe）公司的基于Windows和Macintosh平台的产品。Adobe Acrobat DC for Windows和Macintosh是一套桌面版PDF解决方案；Acrobat Reader DC for Windows和Macintosh是一套用于查看、打印和批注PDF的工具。JavaScript API moudle是其中的一个应用程序编程接口模块。 多款Adobe产品中的JavaScript AP
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2017-16414
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is a part of the JavaScript API module responsible for form field computation. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
多款Adobe产品JavaScript API模块缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Adobe Acrobat DC for Windows和Macintosh等都是美国奥多比（Adobe）公司的基于Windows和Macintosh平台的产品。Adobe Acrobat DC for Windows和Macintosh是一套桌面版PDF解决方案；Acrobat Reader DC for Windows和Macintosh是一套用于查看、打印和批注PDF的工具。JavaScript API moudle是其中的一个应用程序编程接口模块。 多款Adobe产品中的JavaScript AP
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions | Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions | - |
|
II. Public POCs for CVE-2017-16414
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2017-16414
请登录查看更多情报信息。
Vendor Advisories for CVE-2017-16414 (3)
-
https://helpx.adobe.com/security/products/acrobat/apsb17-36.html x_refsource_CONFIRM
-
-
Same Patch Batch · n/a · 2017-12-09 · 86 CVEs total
| CVE-2017-16393 | 多款Adobe产品安全漏洞 | |
| CVE-2017-16390 | 多款Adobe产品安全漏洞 | |
| CVE-2017-16391 | 多款Adobe产品安全漏洞 | |
| CVE-2017-16389 | 多款Adobe产品安全漏洞 | |
| CVE-2017-16386 | 多款Adobe产品缓冲区错误漏洞 | |
| CVE-2017-16385 | 多款Adobe产品缓冲区错误漏洞 | |
| CVE-2017-16384 | 多款Adobe产品缓冲区错误漏洞 | |
| CVE-2017-16383 | 多款Adobe产品缓冲区错误漏洞 | |
| CVE-2017-16382 | 多款Adobe产品image conversion模块缓冲区错误漏洞 | |
| CVE-2017-16387 | 多款Adobe产品缓冲区错误漏洞 | |
| CVE-2017-16392 | 多款Adobe产品缓冲区错误漏洞 | |
| CVE-2017-16394 | 多款Adobe产品WebCapture模块缓冲区错误漏洞 | |
| CVE-2017-16395 | 多款Adobe产品缓冲区错误漏洞 | |
| CVE-2017-16396 | 多款Adobe产品缓冲区错误漏洞 | |
| CVE-2017-16397 | 多款Adobe产品image conversion模块缓冲区错误漏洞 | |
| CVE-2017-16398 | 多款Adobe产品安全漏洞 | |
| CVE-2017-16399 | 多款Adobe产品XPS解析模块缓冲区错误漏洞 | |
| CVE-2017-16400 | 多款Adobe产品JPEG 2000解析器缓冲区错误漏洞 | |
| CVE-2017-16401 | 多款Adobe产品缓冲区错误漏洞 | |
| CVE-2017-16402 | 多款Adobe产品JPEG 2000模块缓冲区错误漏洞 |
Showing top 20 of 86 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2017-16414
No comments yet