CVE-2017-16362
HighSummary
A vulnerability exists in Adobe Acrobat and Reader related to an out of bounds read in the MakeAccesible plugin when handling font data. This can lead to memory access violations, potentially resulting in code corruption or information leaks.
Risk Assessment
Attackers can exploit this vulnerability for unintended reads, writes, or frees, posing a significant threat to system integrity and data confidentiality.
Recommendation
It is recommended to update Adobe Acrobat and Reader to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Adobe Acrobat and Reader (2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier)
See all- CVE-2017-16396High
A vulnerability exists in Adobe Acrobat and Reader related to improper buffer access in the TIFF processing module. Crafted input can cause a mismatch between allocated buffer size and allowed access, potentially leading to arbitrary code execution.
- CVE-2017-16392High
A vulnerability exists in Adobe Acrobat and Reader related to improper buffer access in the JPEG processing module. Crafted input with an unexpected JPEG file segment size can lead to a mismatch between allocated buffer size and allowed access, potentially enabling arbitrary code execution.
- CVE-2017-16360High
A use after free vulnerability exists in Adobe Acrobat and Reader in the MakeAccessible plugin, which can lead to unintended memory access. Exploiting this vulnerability may result in arbitrary code execution.
Original NVD description (English source)
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of an out of bounds read vulnerability in the MakeAccesible plugin, when handling font data. It causes an out of bounds memory access, which sometimes triggers an access violation exception. Attackers can exploit the vulnerability by using the out of bounds access for unintended reads, writes, or frees, potentially leading to code corruption, control-flow hijack, or an information leak attack.