Security bypass in Adobe Reader and Adobe Acrobat - CVE-2017-2947
Published: January 10, 2017
Vulnerability identifier: #VU4132
CSH Severity: Low
CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-2947
CWE-ID: CWE-264
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to bypass certain security restrictions.
The vulnerability exists due to unspecified error when processing PDF files. A remote attacker can create a specially crafted PDF file, trick the victim into opening it and bypass certain security restrictions.
Successful exploitation of the vulnerability may lead to sensitive information disclosure.
Affected software
Adobe Reader
Adobe Acrobat
Adobe Acrobat
How to mitigate CVE-2017-2947
Install the latest version of Adobe Reader and Acrobat:
- Acrobat DC Continuous 15.023.20053
- Acrobat Reader DC Continuous 15.023.20053
- Acrobat DC Classic 15.006.30279
- Acrobat Reader DC Classic 15.006.30279
- Acrobat XI 11.0.19
- Reader XI 11.0.19