CVE-2017-16409
HighSummary
A vulnerability exists in Adobe Acrobat and Reader that involves reading data past the end of the target buffer. This issue affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.
Risk Assessment
An attacker can exploit this vulnerability to expose sensitive data, posing a significant threat to information security within the organization.
Recommendation
It is recommended to update Adobe Acrobat and Reader to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Adobe Acrobat and Reader
See all- CVE-2017-16418High
A vulnerability exists in Adobe Acrobat and Reader related to reading data past the end of the target buffer, affecting versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier. This issue occurs in the image conversion module that handles XPS files.
- CVE-2017-16416High
An issue was discovered in Adobe Acrobat and Reader related to writing data past the end of the intended buffer. The vulnerability affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.
- CVE-2017-16415High
A vulnerability exists in Adobe Acrobat and Reader that allows data to be written past the end of the intended buffer, potentially leading to corruption of sensitive data or execution of arbitrary code. This issue affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.
- CVE-2017-16414High
A vulnerability exists in Adobe Acrobat and Reader related to computations that read data past the end of the target buffer. This issue affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.
- CVE-2017-16410High
A vulnerability exists in Adobe Acrobat and Reader related to untrusted input used to calculate an array index in the image conversion module when processing GIF files. This can lead to writing to a memory location outside of the allocated memory addresses for the data structure.
- CVE-2017-16408High
A vulnerability exists in Adobe Acrobat and Reader that involves reading data past the end of the target buffer. This issue affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.
- CVE-2017-16405High
A vulnerability exists in Adobe Acrobat and Reader that involves reading data past the end of the target buffer. This issue affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.
- CVE-2017-16403High
A vulnerability exists in Adobe Acrobat and Reader that allows reading data past the end of the target buffer. This issue affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.
- CVE-2017-16402High
A vulnerability exists in Adobe Acrobat and Reader related to reading data past the end of the target buffer in the JPEG 2000 module. This issue affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.
- CVE-2017-16394High
A vulnerability exists in Adobe Acrobat and Reader that involves reading data past the end of the target buffer in the WebCapture module. This issue affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.
Original NVD description (English source)
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of the Adobe graphics module responsible for displaying textual data. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.