CVE-2017-16399
The dereferencing operation is a read operation, and an attack can result in sensitive data exposure.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (6.72%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This issue is due to an untrusted pointer dereference in the XPS parsing module. In this scenario, the input is crafted in a way that the computation results in pointers to memory locations that do not belong to the relevant process address space. The dereferencing operation is a read operation, and an attack can result in sensitive data exposure.
- CVSS 3.0
- 8.8 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS
- 6.72% probability · 94th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-125
- Affected
- adobe/acrobat · adobe/acrobat dc · adobe/acrobat reader · adobe/acrobat reader dc
- Source
- psirt@adobe.com
References
- http://www.securityfocus.com/bid/102140Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039791Third Party Advisory, VDB Entry
- https://helpx.adobe.com/security/products/acrobat/apsb17-36.htmlVendor Advisory
- http://www.securityfocus.com/bid/102140Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039791Third Party Advisory, VDB Entry
- https://helpx.adobe.com/security/products/acrobat/apsb17-36.htmlVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.