Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-16376

Опубликовано: 09 дек. 2017
Источник: nvd
CVSS3: 8.8
CVSS2: 9.3
EPSS Низкий

Описание

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is a part of the MakeAccessible plugin. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*
Версия до 11.0.22 (включая)
cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*
Версия от 17.0 (включая) до 17.011.30066 (включая)
cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*
Версия от - (включая) до 17.012.20098 (включая)
cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*
Версия от 15.0 (включая) до 15.006.30355 (включая)
cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*
Версия до 11.0.22 (включая)
cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*
Версия от 17.0 (включая) до 17.011.30066 (включая)
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*
Версия от - (включая) до 17.012.20098 (включая)
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*
Версия от 15.0 (включая) до 15.006.30355 (включая)

EPSS

Процентиль: 92%
0.08675
Низкий

8.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 8.8
github
больше 3 лет назад

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is a part of the MakeAccessible plugin. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.

EPSS

Процентиль: 92%
0.08675
Низкий

8.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-125