Vulnerabilities > Adobe > Acrobat Reader DC > 15.006.30097

DATE CVE VULNERABILITY TITLE RISK
2017-01-11 CVE-2017-2962 Incorrect Type Conversion or Cast vulnerability in Adobe products
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable type confusion vulnerability in the XSLT engine related to localization functionality.
network
adobe apple microsoft CWE-704
critical
9.3
2017-01-11 CVE-2017-2961 Use After Free vulnerability in Adobe products
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the XFA engine, related to validation functionality.
network
adobe apple microsoft CWE-416
critical
9.3
2017-01-11 CVE-2017-2960 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Adobe products
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to parsing of EXIF metadata.
network
adobe apple microsoft CWE-119
critical
9.3
2017-01-11 CVE-2017-2959 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Adobe products
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability in the image conversion engine, related to parsing of color profile metadata.
network
adobe apple microsoft CWE-119
critical
9.3
2017-01-11 CVE-2017-2958 Use After Free vulnerability in Adobe products
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine.
network
adobe apple microsoft CWE-416
critical
9.3
2017-01-11 CVE-2017-2957 Use After Free vulnerability in Adobe products
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine, related to collaboration functionality.
network
adobe apple microsoft CWE-416
critical
9.3
2017-01-11 CVE-2017-2956 Use After Free vulnerability in Adobe products
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine, related to manipulation of the navigation pane.
network
adobe apple microsoft CWE-416
critical
9.3
2017-01-11 CVE-2017-2955 Use After Free vulnerability in Adobe products
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine.
network
adobe apple microsoft CWE-416
critical
9.3
2017-01-11 CVE-2017-2954 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Adobe products
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion module when handling malformed TIFF images.
network
adobe apple microsoft CWE-119
critical
9.3
2017-01-11 CVE-2017-2953 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Adobe products
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion module when processing a TIFF image.
network
adobe apple microsoft CWE-119
critical
9.3