CVE-2017-2949

Sažetak

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability in the XSLT engine. Successful exploitation could lead to arbitrary code execution.

Reference

http://www.securityfocus.com/bid/95344
http://www.securitytracker.com/id/1037574
http://www.zerodayinitiative.com/advisories/ZDI-17-005
http://www.zerodayinitiative.com/advisories/ZDI-17-006
http://www.zerodayinitiative.com/advisories/ZDI-17-007
http://www.zerodayinitiative.com/advisories/ZDI-17-008
http://www.zerodayinitiative.com/advisories/ZDI-17-009
http://www.zerodayinitiative.com/advisories/ZDI-17-011
http://www.zerodayinitiative.com/advisories/ZDI-17-012
http://www.zerodayinitiative.com/advisories/ZDI-17-013
http://www.zerodayinitiative.com/advisories/ZDI-17-015
http://www.zerodayinitiative.com/advisories/ZDI-17-016
http://www.zerodayinitiative.com/advisories/ZDI-17-017
http://www.zerodayinitiative.com/advisories/ZDI-17-018
http://www.zerodayinitiative.com/advisories/ZDI-17-019
http://www.zerodayinitiative.com/advisories/ZDI-17-020
http://www.zerodayinitiative.com/advisories/ZDI-17-028
http://www.zerodayinitiative.com/advisories/ZDI-17-029
https://helpx.adobe.com/security/products/acrobat/apsb17-01.html

CVSS

Base:	9.3
Impact:	10.0
Exploitability:	8.6

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
COMPLETE	COMPLETE	COMPLETE

CVSS vektor

AV:N/AC:M/Au:N/C:C/I:C/A:C

Zadnje važnije ažuriranje

18-01-2017 - 02:59

Objavljeno

11-01-2017 - 04:59