HTTP: Adobe Acrobat CVE-2017-16383 Remote Code Execution & Heap-based Buffer Overflow

This signature detects attempts to exploit a known vulnerability against Adobe Acrobat Pro. A successful attack can lead to arbitrary code execution. Also A heap-based buffer overflow vulnerability has been reported in the XPS component of Adobe Acrobat. A remote attacker could exploit this vulnerability by enticing a target user into opening a crafted XPS document. Successful exploitation could result in arbitrary code execution under the security context of the user.

Extended Description

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a heap overflow vulnerability when processing a JPEG file embedded within an XPS document.

Affected Products

Adobe acrobat_dc

References

BugTraq: 101823

CVE: CVE-2017-16383

Short Name

HTTP:STC:ADOBE:CVE-2017-16383CE

Severity

Major

Recommended

True

Recommended Action

Drop

HTTP: Adobe Acrobat CVE-2017-16383 Remote Code Execution & Heap-based Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?