Page 12 of 319 results (0.004 seconds)

CVSS: 9.3EPSS: 9%CPEs: 8EXPL: 0

CVE-2017-16397 – Adobe Acrobat Pro DC ImageConversion EMF EMR_STRETCHDIBITS cySrc Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2017-16397

09 Dec 2017 — An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is a part of Enhanced Metafile Format (EMF) processing within the image conversion module. The use of an invalid (out-of-range) pointer offset during access of internal data structure ... • http://www.securityfocus.com/bid/102140 • CWE-125: Out-of-bounds Read •

CVSS: 9.3EPSS: 6%CPEs: 8EXPL: 0

CVE-2017-16414

https://notcve.org/view.php?id=CVE-2017-16414

09 Dec 2017 — An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is a part of the JavaScript API module responsible for form field computation. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields cause... • http://www.securityfocus.com/bid/102140 • CWE-125: Out-of-bounds Read •

CVSS: 9.3EPSS: 9%CPEs: 8EXPL: 0

CVE-2017-16399

https://notcve.org/view.php?id=CVE-2017-16399

09 Dec 2017 — An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This issue is due to an untrusted pointer dereference in the XPS parsing module. In this scenario, the input is crafted in a way that the computation results in pointers to memory locations that do not belong to the relevant process address space. The dereferencing operation is a read operation, and an attack can... • http://www.securityfocus.com/bid/102140 • CWE-125: Out-of-bounds Read •

CVSS: 9.3EPSS: 9%CPEs: 8EXPL: 0

CVE-2017-16405

https://notcve.org/view.php?id=CVE-2017-16405

09 Dec 2017 — An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of Acrobat's page display functionality. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A success... • http://www.securityfocus.com/bid/102140 • CWE-125: Out-of-bounds Read •

CVSS: 9.3EPSS: 9%CPEs: 8EXPL: 0

CVE-2017-16367

https://notcve.org/view.php?id=CVE-2017-16367

09 Dec 2017 — An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a type confusion overflow vulnerability. The vulnerability leads to an out of bounds memory access. Attackers can exploit the vulnerability by using the out of bounds access for unintended reads or writes -- potentially leading to code corruption, control-flow hijack, or an in... • http://www.securityfocus.com/bid/101815 • CWE-704: Incorrect Type Conversion or Cast •

CVSS: 9.3EPSS: 9%CPEs: 8EXPL: 0

CVE-2017-16370

https://notcve.org/view.php?id=CVE-2017-16370

09 Dec 2017 — An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs because of a computation that reads data that is past the end of the target buffer; the computation is a part of the JavaScript engine. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can le... • http://www.securityfocus.com/bid/102140 • CWE-125: Out-of-bounds Read •

CVSS: 9.3EPSS: 9%CPEs: 8EXPL: 0

CVE-2017-16376

https://notcve.org/view.php?id=CVE-2017-16376

09 Dec 2017 — An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is a part of the MakeAccessible plugin. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attac... • http://www.securityfocus.com/bid/102140 • CWE-125: Out-of-bounds Read •

CVSS: 9.3EPSS: 6%CPEs: 8EXPL: 0

CVE-2017-16410

https://notcve.org/view.php?id=CVE-2017-16410

09 Dec 2017 — An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is a result of untrusted input that is used to calculate an array index; the calculation occurs in the image conversion module, when processing GIF files. The vulnerability leads to an operation that can write to a memory location that is outside of the memory addresses allocated for the data st... • http://www.securityfocus.com/bid/101819 • CWE-129: Improper Validation of Array Index •

CVSS: 9.3EPSS: 9%CPEs: 8EXPL: 0

CVE-2017-16391

https://notcve.org/view.php?id=CVE-2017-16391

09 Dec 2017 — An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is a result of untrusted input that is used to calculate an array index; the calculation occurs in the printing functionality. The vulnerability leads to an operation that can write to a memory location that is outside of the memory addresses allocated for the data structure. The specific scenar... • http://www.securityfocus.com/bid/101819 • CWE-129: Improper Validation of Array Index •

CVSS: 9.3EPSS: 9%CPEs: 8EXPL: 0

CVE-2017-16373

https://notcve.org/view.php?id=CVE-2017-16373

09 Dec 2017 — An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This issue is due to an untrusted pointer dereference. In this scenario, the input is crafted in way that the computation results in pointers to memory locations that do not belong to the relevant process address space. The dereferencing operation is a read operation, and an attack can result in sensitive data ex... • http://www.securityfocus.com/bid/101813 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •