VulnerabilityModified
CVE-2017-3044
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the JPEG 2000 engine, related to image scaling.
HIGH 7.8EPSS 20.4%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 20.4%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the JPEG 2000 engine, related to image scaling. Successful exploitation could lead to arbitrary code execution.
- CVSS 3.0
- 7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS
- 20.38% probability · 97th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-787
- Affected
- adobe/acrobat · adobe/acrobat dc · adobe/acrobat reader dc · adobe/reader
- Source
- psirt@adobe.com
References
- http://www.securityfocus.com/bid/97556Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038228
- https://helpx.adobe.com/security/products/acrobat/apsb17-11.htmlVendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-17-267/Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/97556Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038228
- https://helpx.adobe.com/security/products/acrobat/apsb17-11.htmlVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.