CVE-2017-16415
Quick assessment
Affected
n/a Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Adobe Acrobat DC等都是美国奥多比（Adobe）公司的产品。Acrobat DC是一套桌面版PDF解决方案；Acrobat Reader DC是一套用于查看、打印和批注PDF的工具。Classic和Continuous是Acrobat DC和Acrobat Reader DC产品下载中心所提供的两种更新机制。 多款Adobe产品中存在安全漏洞。远程攻击者可利用该漏洞在当前用户的上下文中执行任意代码或破坏敏感数据（越边界写入）。基于Windows和Macintosh平台的以下产品和版本受到影响
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2017-16415
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a computation that writes data past the end of the intended buffer; the computation is a part of the functionality that handles font encodings. The vulnerability is a result of out of range pointer offset that is used to access sub-elements of an internal data structure. An attacker can potentially leverage the vulnerability to corrupt sensitive data or execute arbitrary code.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
多款Adobe产品安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Adobe Acrobat DC等都是美国奥多比（Adobe）公司的产品。Acrobat DC是一套桌面版PDF解决方案；Acrobat Reader DC是一套用于查看、打印和批注PDF的工具。Classic和Continuous是Acrobat DC和Acrobat Reader DC产品下载中心所提供的两种更新机制。 多款Adobe产品中存在安全漏洞。远程攻击者可利用该漏洞在当前用户的上下文中执行任意代码或破坏敏感数据（越边界写入）。基于Windows和Macintosh平台的以下产品和版本受到影响
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions | Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions | - |
|
II. Public POCs for CVE-2017-16415
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2017-16415
请登录查看更多情报信息。
Vendor Advisories for CVE-2017-16415 (3)
-
https://helpx.adobe.com/security/products/acrobat/apsb17-36.html x_refsource_CONFIRM
-
-
Same Patch Batch · n/a · 2017-12-09 · 86 CVEs total
| CVE-2017-16393 | 多款Adobe产品安全漏洞 | |
| CVE-2017-16390 | 多款Adobe产品安全漏洞 | |
| CVE-2017-16391 | 多款Adobe产品安全漏洞 | |
| CVE-2017-16389 | 多款Adobe产品安全漏洞 | |
| CVE-2017-16386 | 多款Adobe产品缓冲区错误漏洞 | |
| CVE-2017-16385 | 多款Adobe产品缓冲区错误漏洞 | |
| CVE-2017-16384 | 多款Adobe产品缓冲区错误漏洞 | |
| CVE-2017-16383 | 多款Adobe产品缓冲区错误漏洞 | |
| CVE-2017-16382 | 多款Adobe产品image conversion模块缓冲区错误漏洞 | |
| CVE-2017-16387 | 多款Adobe产品缓冲区错误漏洞 | |
| CVE-2017-16392 | 多款Adobe产品缓冲区错误漏洞 | |
| CVE-2017-16394 | 多款Adobe产品WebCapture模块缓冲区错误漏洞 | |
| CVE-2017-16395 | 多款Adobe产品缓冲区错误漏洞 | |
| CVE-2017-16396 | 多款Adobe产品缓冲区错误漏洞 | |
| CVE-2017-16397 | 多款Adobe产品image conversion模块缓冲区错误漏洞 | |
| CVE-2017-16398 | 多款Adobe产品安全漏洞 | |
| CVE-2017-16399 | 多款Adobe产品XPS解析模块缓冲区错误漏洞 | |
| CVE-2017-16400 | 多款Adobe产品JPEG 2000解析器缓冲区错误漏洞 | |
| CVE-2017-16401 | 多款Adobe产品缓冲区错误漏洞 | |
| CVE-2017-16402 | 多款Adobe产品JPEG 2000模块缓冲区错误漏洞 |
Showing top 20 of 86 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2017-16415
No comments yet