ZeroHour

CVE-2017-3116

CVSS 3.0
8.8 high
EPSS
8%p94
Published
()
Modified
Description

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the MakeAccessible plugin when parsing TrueType font data. Successful exploitation could lead to arbitrary code execution.

Vendors
adobe
Products
acrobat, acrobat dc, acrobat reader dc, reader
Weakness
CWE-119
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.