New MCP server — Bring vulnerability intelligence into your AI
Back to feed

CVE-2017-11236

NVDCIRCLENISA

EUVD-2017-2870 · Published Aug 11, 2017

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the internal handling of UTF-16 literal strings. Successful exploitation could lead to arbitrary code execution.

Technologies

Adobe AcrobatAdobe ReaderAdobe Acrobat Reader DcMicrosoft WindowsApple Mac Os XAdobe Acrobat DcAdobe Acrobat Reader

Weaknesses

CWE-119

CVSS scores

  • v3.06.5CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
  • v2.04.3AV:N/AC:M/Au:N/C:P/I:N/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

Initial Access

References

Potentially impacted assets

See if this affects your attack surface

Take 15 minutes to discover our platform with our experts

PatrowlIntel platform screenshot