Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier. vulnerabilities
18 known CVE vulnerabilities in Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier., translated and rated.
- CVE-2017-16420High
A vulnerability exists in Adobe Acrobat and Reader that involves reading data past the end of the target buffer. This issue affects the JavaScript engine responsible for annotation abstraction.
- CVE-2017-16417High
A vulnerability exists in Adobe Acrobat and Reader related to reading data past the end of the target buffer, occurring in the font parsing module. The use of an invalid pointer during access to internal data structure fields leads to this vulnerability.
- CVE-2017-16413High
A vulnerability exists in Adobe Acrobat and Reader related to a computation that writes data past the end of the intended buffer. This issue affects the XPS to PDF conversion when processing TIFF files.
- CVE-2017-16412High
A vulnerability in Adobe Acrobat and Reader allows reading data past the end of the target buffer during XPS conversion, potentially leading to sensitive data exposure.
- CVE-2017-16411High
A vulnerability exists in Adobe Acrobat and Reader that involves reading data past the end of the target buffer. This issue is related to the WebCapture module and an internal hash table implementation.
- CVE-2017-16407High
An issue was discovered in Adobe Acrobat and Reader that involves writing data past the end of the intended buffer. This vulnerability results from an out of range pointer offset, which can lead to corrupting sensitive data or executing arbitrary code.
- CVE-2017-16406High
A vulnerability in Adobe Acrobat and Reader related to improper EMF processing leads to out of bounds memory access. This can result in code corruption, control-flow hijack, or information leak.
- CVE-2017-16404High
A vulnerability exists in Adobe Acrobat and Reader that allows data to be written past the end of the intended buffer. This issue is related to processing Enhanced Metafile Format Plus (EMF+).
- CVE-2017-16401High
A vulnerability exists in Adobe Acrobat and Reader that involves reading data past the end of the target buffer during image conversion in Enhanced Metafile Format Plus (EMF +). The use of an invalid pointer offset during access to internal data structure fields causes this vulnerability.
- CVE-2017-16400High
A vulnerability exists in Adobe Acrobat and Reader due to reading data past the end of the target buffer, resulting from an error in the JPEG 2000 parser. The use of an invalid pointer offset during access to internal data structure fields causes this vulnerability.
- CVE-2017-16391High
A vulnerability exists in Adobe Acrobat and Reader related to untrusted input used to calculate an array index in the printing functionality. This can lead to writing to a memory location outside the process's address space.
- CVE-2017-16387High
A vulnerability exists in Adobe Acrobat and Reader due to reading data past the end of the target buffer, resulting from a computation error in the JPEG2000 codec. The use of an invalid pointer offset during access to internal data structure fields causes this vulnerability.
- CVE-2017-16381High
An issue was discovered in Adobe Acrobat and Reader related to buffer access with an incorrect length value when processing TIFF files embedded within an XPS document. Crafted TIFF image input can cause a mismatch between allocated buffer size and the access allowed, potentially leading to arbitrary code execution.
- CVE-2017-16378High
An issue was discovered in Adobe Acrobat and Reader related to uninitialized pointer access. As a result, an attacker may be able to read sensitive portions of memory.
- CVE-2017-16370High
A vulnerability in Adobe Acrobat and Reader is present due to reading data past the end of the target buffer, caused by an invalid pointer in the JavaScript engine. An attacker can exploit this flaw to expose sensitive data.
- CVE-2017-16367High
A vulnerability was discovered in Adobe Acrobat and Reader that leads to out of bounds memory access. Attackers can exploit this flaw for unintended reads or writes, potentially resulting in code corruption or control-flow hijack.
- CVE-2017-16366High
A vulnerability was discovered in Adobe Acrobat and Reader that allows for a security bypass in the AcroPDF plugin. This affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.
- CVE-2017-16363High
A vulnerability exists in Adobe Acrobat and Reader caused by a buffer over-read in the module handling character codes for certain textual representations. Invalid input leads to computations that point to memory locations outside the valid buffer areas.

