CVE-2017-16411

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of the WebCapture module, related to an internal hash table implementation. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*
cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*
cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*

History

21 Nov 2024, 03:16

Type Values Removed Values Added
References () http://www.securityfocus.com/bid/101813 - VDB Entry, Third Party Advisory () http://www.securityfocus.com/bid/101813 - Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id/1039791 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1039791 - Third Party Advisory, VDB Entry
References () https://helpx.adobe.com/security/products/acrobat/apsb17-36.html - Broken Link () https://helpx.adobe.com/security/products/acrobat/apsb17-36.html - Broken Link

Information

Published : 2017-12-09 06:29

Updated : 2024-11-21 03:16


NVD link : CVE-2017-16411

Mitre link : CVE-2017-16411

CVE.ORG link : CVE-2017-16411


JSON object : View

Products Affected

adobe

  • acrobat_reader
  • acrobat_reader_dc
  • acrobat_dc
  • acrobat
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer