Description
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable integer overflow vulnerability in the XML Forms Architecture (XFA) engine, related to layout functionality. Successful exploitation could lead to arbitrary code execution.
Metrics
CVSS 3.0 7.8/10
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier. | Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier. |
References
- http://www.securityfocus.com/bid/97548Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038228
- https://helpx.adobe.com/security/products/acrobat/apsb17-11.htmlVendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-17-260/Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/97548Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038228
- https://helpx.adobe.com/security/products/acrobat/apsb17-11.htmlVendor Advisory
Timeline
- Published
- Apr 12, 2017
- Last modified
- Jun 17, 2026
- NVD status
- Modified