HTTP: Adobe Acrobat ImageConversion EMF Integer Overflow

This signature detects attempts to exploit a known vulnerability against Adobe Systems Acrobat reader. A successful attack can lead to a Integer overflow and arbitrary remote code execution within the security context of the user

Extended Description

Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

References

CVE: CVE-2017-11308

URL: https://helpx.adobe.com/security/products/acrobat/apsb17-36.html https://msdn.microsoft.com/en-us/library/cc230972.aspx

Short Name

HTTP:STC:ADOBE:CVE-2017-11308

Severity

Major

Recommended

True

Recommended Action

Drop

HTTP: Adobe Acrobat ImageConversion EMF Integer Overflow

Extended Description

References

Found a potential security threat?