CVE-2017-11221 : Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable type confusion vulnerability in the annotation functionality. Successful exploitation could lead to arbitrary code execution.

Published 2017-08-11 19:29:01

Updated 2019-03-14 13:50:18

Source Adobe Systems Incorporated

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2017-11221

EPSS FAQ

5.55%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 93 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2017-11221

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C	8.6	10.0	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
8.8	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	2.8	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: High

References for CVE-2017-11221

https://helpx.adobe.com/security/products/acrobat/apsb17-24.html

Adobe Security Bulletin
Patch;Vendor Advisory

CVEs referencing this url
http://www.securityfocus.com/bid/100181

Adobe Acrobat and Reader Type Confusion APSB17-24 Multiple Remote Code Execution Vulnerabilities
Third Party Advisory;VDB Entry

CVEs referencing this url
http://www.securitytracker.com/id/1039098

Adobe Acrobat/Reader Multiple Bugs Let Remote Users Obtain Potentially Sensitive Information Disclosure, Bypass Security, and Execute Arbitrary Code - SecurityTracker
Third Party Advisory;VDB Entry

CVEs referencing this url

Products affected by CVE-2017-11221

Adobe » Acrobat Reader
Versions from including (>=) 17.011.00000 and up to, including, (<=) 17.011.30066
cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X
When used together with: Microsoft » Windows
Adobe » Acrobat
Versions from including (>=) 17.011.00000 and up to, including, (<=) 17.011.30066
cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X
When used together with: Microsoft » Windows
Adobe » Acrobat
Versions from including (>=) 11.0.0 and up to, including, (<=) 11.0.20
cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X
When used together with: Microsoft » Windows
Adobe » Reader
Versions from including (>=) 11.0.0 and up to, including, (<=) 11.0.20
cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X
When used together with: Microsoft » Windows
Adobe » Acrobat Dc » Classic Edition
Versions from including (>=) 15.006.30060 and up to, including, (<=) 15.006.30306
cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*
Matching versions
When used together with: Apple » Mac Os X
When used together with: Microsoft » Windows
Adobe » Acrobat Dc » Continuous Edition
Versions from including (>=) 15.007.20033 and up to, including, (<=) 17.009.20058
cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*
Matching versions
When used together with: Apple » Mac Os X
When used together with: Microsoft » Windows
Adobe » Acrobat Reader Dc » Classic Edition
Versions from including (>=) 15.006.30060 and up to, including, (<=) 15.006.30306
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*
Matching versions
When used together with: Apple » Mac Os X
When used together with: Microsoft » Windows
Adobe » Acrobat Reader Dc » Continuous Edition
Versions from including (>=) 15.007.20033 and up to, including, (<=) 17.009.20058
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*
Matching versions
When used together with: Apple » Mac Os X
When used together with: Microsoft » Windows

Vulnerability Details : CVE-2017-11221

Exploit prediction scoring system (EPSS) score for CVE-2017-11221

CVSS scores for CVE-2017-11221

CWE ids for CVE-2017-11221

References for CVE-2017-11221

Products affected by CVE-2017-11221