CVE-2017-11209

Published: Aug 11, 2017Modified: May 13, 2026

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability that occurs when reading a JPEG file embedded within XML Paper Specification (XPS) file. Successful exploitation could lead to arbitrary code execution.

Affected (8)

Products: Adobe: Acrobat, Acrobat Dc, Acrobat Reader, Acrobat Reader Dc, Reader

5 products

Configuration A

8 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Adobe Acrobat	11.0.0 ≤ version ≤ 11.0.20
Adobe Acrobat	17.011.00000 ≤ version ≤ 17.011.30066
Adobe Acrobat Dc	15.006.30060 ≤ version ≤ 15.006.30306
Adobe Acrobat Dc	15.007.20033 ≤ version ≤ 17.009.20058
Adobe Acrobat Reader	17.011.00000 ≤ version ≤ 17.011.30066
Adobe Acrobat Reader Dc	15.006.30060 ≤ version ≤ 15.006.30306
Adobe Acrobat Reader Dc	15.007.20033 ≤ version ≤ 17.009.20058
Adobe Reader	11.0.0 ≤ version ≤ 11.0.20