Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-11170 State: PUBLISHED Published: 2017-07-11T20:00:00 Last Updated: 2024-08-05T17:57:58.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadTGAImage function in coders\tga.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via invalid colors data in the header of a TGA or VST file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/472 - http://www.securityfocus.com/bid/99565
CVE ID: CVE-2017-11171 State: PUBLISHED Published: 2017-07-11T20:00:00Z Last Updated: 2024-09-17T03:34:04.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bad reference counting in the context of accept_ice_connection() in gsm-xsmp-server.c in old versions of gnome-session up until version 2.29.92 allows a local attacker to establish ICE connections to gnome-session with invalid authentication data (an invalid magic cookie). Each failed authentication attempt will leak a file descriptor in gnome-session. When the maximum number of file descriptors is exhausted in the gnome-session process, it will enter an infinite loop trying to communicate without success, consuming 100% of
d in the gnome-session process, it will enter an infinite loop trying to communicate without success, consuming 100% of the CPU. The graphical session associated with the gnome-session process will stop working correctly, because communication with gnome-session is no longer possible. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1025068 - https://github.com/GNOME/gnome-session/commit/b0dc999e0b45355314616321dbb6cb71e729fc9d
CVE ID: CVE-2017-11173 State: PUBLISHED Published: 2017-07-13T03:00:00 Last Updated: 2024-08-05T17:57:58.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Missing anchor in generated regex for rack-cors before 0.4.1 allows a malicious third-party site to perform CORS requests. If the configuration were intended to allow only the trusted example.com domain name and not the malicious example.net domain name, then example.com.example.net (as well as example.com-example.net) would be inadvertently allowed. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jul/22 - https://packetstormsecurity.com/files/143345/rack-cors-Missing-A
ces: - http://seclists.org/fulldisclosure/2017/Jul/22 - https://packetstormsecurity.com/files/143345/rack-cors-Missing-Anchor.html - https://github.com/cyu/rack-cors/commit/42ebe6caa8e85ffa9c8a171bda668ba1acc7a5e6 - http://www.debian.org/security/2017/dsa-3931
CVE ID: CVE-2017-11174 State: PUBLISHED Published: 2017-07-12T21:00:00 Last Updated: 2024-08-05T17:57:57.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: In install/page_dbsettings.php in the Core distribution of XOOPS 2.5.8.1, unfiltered data passed to CREATE and ALTER SQL queries caused SQL Injection in the database settings page, related to use of GBK in CHARACTER SET and COLLATE clauses. Additional Analyst Notes: - CVE Program Container: References: - https://tsublogs.wordpress.com/2017/07/12/xoops-core-2-5-8-1-install-db-sql-injection/
CVE ID: CVE-2017-11175 State: PUBLISHED Published: 2018-07-05T18:00:00 Last Updated: 2024-08-05T17:57:58.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: In J2 Innovations FIN Stack 4.0, the authentication webform is vulnerable to reflected XSS via the query string to /login. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/miruser/Roche-CVEs/blob/master/CVE-2017-11175.md
CVE ID: CVE-2017-11176 State: PUBLISHED Published: 2017-07-11T23:00:00 Last Updated: 2024-08-05T17:57:57.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic. During a user-space close of a Netlink socket, it allows attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3927 - https://access.redhat.com/errata/RHSA-2018:0169 - https://access.redhat.com/errata/RHSA-2017:2918 - https://access.redhat.com/errata/R
.redhat.com/errata/RHSA-2018:0169 - https://access.redhat.com/errata/RHSA-2017:2918 - https://access.redhat.com/errata/RHSA-2017:2931 - https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 - http://www.securityfocus.com/bid/99919 - https://github.com/torvalds/linux/commit/f991af3daabaecff34684fd51fac80319d1baad1 - http://www.debian.org/security/2017/dsa-3945 - https://www.exploit-db.com/exploits/45553/ - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f991af3daabaecff34684fd51fac80319d1baad1 - https://access.redhat.com/errata/RHSA-2018:3822 - https://access.redhat.com/errata/RHSA-2017:2930
CVE ID: CVE-2017-11177 State: PUBLISHED Published: 2017-11-06T17:00:00 Last Updated: 2024-08-05T17:57:58.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRITON AP-EMAIL 8.2 before 8.2 IB does not properly restrict file access in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://support.forcepoint.com/KBArticle?id=000014490
CVE ID: CVE-2017-11178 State: PUBLISHED Published: 2017-07-12T00:00:00Z Last Updated: 2024-09-17T00:37:05.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: In FineCMS through 2017-07-11, application/core/controller/style.php allows remote attackers to write to arbitrary files via the contents and filename parameters in a route=style action. For example, this can be used to overwrite a .php file because the file extension is not checked. Additional Analyst Notes: - CVE Program Container: References: - http://www.yuesec.com/img/cccccve/finecms_writefile/finecmswritefile_2017_07_011_subm1t.html
CVE ID: CVE-2017-11179 State: PUBLISHED Published: 2017-07-12T00:00:00Z Last Updated: 2024-09-16T23:55:36.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: FineCMS through 2017-07-11 has stored XSS in route=admin when modifying user information, and in route=register when registering a user account. Additional Analyst Notes: - CVE Program Container: References: - http://www.yuesec.com/img/cccccve/finecms_storedxss/finecms_storedxss26543.html
CVE ID: CVE-2017-11180 State: PUBLISHED Published: 2017-07-12T00:00:00Z Last Updated: 2024-09-16T20:01:35.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: FineCMS through 2017-07-11 has stored XSS in the logging functionality, as demonstrated by an XSS payload in (1) the User-Agent header of an HTTP request or (2) the username entered on the login screen. Additional Analyst Notes: - CVE Program Container: References: - http://www.yuesec.com/img/cccccve/finecms_storedxss/finecms_storedxss26543.html
CVE ID: CVE-2017-11181 State: PUBLISHED Published: 2017-07-12T00:00:00Z Last Updated: 2024-09-17T00:21:00.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the Messaging section. Subject and Message fields are vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/143307/Rise-Ultimate-Project-Manager-1.8-Cross-Site-Scripting.html
CVE ID: CVE-2017-11182 State: PUBLISHED Published: 2017-07-12T00:00:00Z Last Updated: 2024-09-16T16:37:45.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the My Profile section. All input fields are vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/143307/Rise-Ultimate-Project-Manager-1.8-Cross-Site-Scripting.html
CVE ID: CVE-2017-11183 State: PUBLISHED Published: 2017-07-28T05:00:00 Last Updated: 2024-08-05T17:57:57.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete arbitrary files via a crafted file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/glpi-project/glpi/issues/2450 - https://github.com/glpi-project/glpi/releases/tag/9.1.5
CVE ID: CVE-2017-11184 State: PUBLISHED Published: 2017-07-28T05:00:00 Last Updated: 2024-08-05T17:57:58.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection exists in front/devicesoundcard.php in GLPI before 9.1.5 via the start parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/glpi-project/glpi/issues/2449 - https://github.com/glpi-project/glpi/releases/tag/9.1.5
CVE ID: CVE-2017-11185 State: PUBLISHED Published: 2017-08-18T17:00:00 Last Updated: 2024-08-05T17:57:58.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted RSA signature. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100492 - http://www.debian.org/security/2017/dsa-3962 - https://www.strongswan.org/blog/2017/08/14/strongswan-vulnerability-%28cve-2017-11185%29.html
CVE ID: CVE-2017-11187 State: PUBLISHED Published: 2017-07-12T14:00:00Z Last Updated: 2024-09-17T03:39:05.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpMyFAQ before 2.9.8 does not properly mitigate brute-force attacks that try many passwords in attempted logins quickly. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpmyfaq.de/security/advisory-2017-07-12
CVE ID: CVE-2017-11188 State: PUBLISHED Published: 2017-07-12T15:00:00 Last Updated: 2024-08-05T17:57:57.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF check. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99566 - https://github.com/ImageMagick/ImageMagick/issues/509
CVE ID: CVE-2017-11189 State: PUBLISHED Published: 2017-07-12T16:00:00 Last Updated: 2024-08-05T17:57:57.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: unrarlib.c in unrar-free 0.0.1 might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash), which could be relevant if unrarlib is used as library code for a long-running application. NOTE: one of the several test cases in the references may be the same as what was separately reported as CVE-2017-14121. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/0x09AL/my-exploits/tree/master/pocs/unrar-free/dos
CVE ID: CVE-2017-11190 State: PUBLISHED Published: 2017-07-12T16:00:00 Last Updated: 2024-08-05T17:57:58.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: unrarlib.c in unrar-free 0.0.1, when _DEBUG_LOG mode is enabled, might allow remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via an RAR archive containing a long filename. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/0x09AL/my-exploits/blob/master/pocs/unrar-free/buffer-overflow/DESCRIPTION
CVE ID: CVE-2017-11191 State: PUBLISHED Published: 2017-09-27T19:00:00 Last Updated: 2024-08-05T17:57:58.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeIPA 4.x with API version 2.213 allows a remote authenticated users to bypass intended account-locking restrictions via an unlock action with an old session ID (for the same user account) that had been created for an earlier session. NOTE: Vendor states that issue does not exist in product and does not recognize this report as a valid security concern Additional Analyst Notes: - ADP Container: - CVE Program Container: References: - http://packetstormsecurity.com/files/143532/FreeIPA-2.213-Session-Hijacking.html
CVE ID: CVE-2017-11193 State: PUBLISHED Published: 2017-07-12T20:00:00 Last Updated: 2024-08-05T18:05:28.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pulse Connect Secure 8.3R1 has CSRF in diag.cgi. In the panel, the diag.cgi file is responsible for running commands such as ping, ping6, traceroute, traceroute6, nslookup, arp, and Portprobe. These functions do not have any protections against CSRF. That can allow an attacker to run these commands against any IP if they can get an admin to visit their malicious CSRF page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99621 - https://twitter.com/sxcurity/status/8845569051459
gram Container: References: - http://www.securityfocus.com/bid/99621 - https://twitter.com/sxcurity/status/884556905145937921 - http://www.sxcurity.pro/Multiple%20XSS%20and%20CSRF%20in%20Pulse%20Connect%20Secure%20v8.3R1.pdf
CVE ID: CVE-2017-11194 State: PUBLISHED Published: 2017-07-12T20:00:00 Last Updated: 2024-08-05T18:05:28.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pulse Connect Secure 8.3R1 has Reflected XSS in adminservercacertdetails.cgi. In the admin panel, the certid parameter of adminservercacertdetails.cgi is reflected in the application's response and is not properly sanitized, allowing an attacker to inject tags. An attacker could come up with clever payloads to make the system run commands such as ping, ping6, traceroute, nslookup, arp, etc. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/sxcurity/status/884556905145937921 - http://www.sxcu
t Notes: - CVE Program Container: References: - https://twitter.com/sxcurity/status/884556905145937921 - http://www.sxcurity.pro/Multiple%20XSS%20and%20CSRF%20in%20Pulse%20Connect%20Secure%20v8.3R1.pdf
CVE ID: CVE-2017-11195 State: PUBLISHED Published: 2017-07-12T20:00:00 Last Updated: 2024-08-05T18:05:28.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pulse Connect Secure 8.3R1 has Reflected XSS in launchHelp.cgi. The helpLaunchPage parameter is reflected in an IFRAME element, if the value contains two quotes. It properly sanitizes quotes and tags, so one cannot simply close the src with a quote and inject after that. However, an attacker can use javascript: or data: to abuse this. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/sxcurity/status/884556905145937921 - http://www.sxcurity.pro/Multiple%20XSS%20and%20CSRF%20in%20Pulse%20Conne
witter.com/sxcurity/status/884556905145937921 - http://www.sxcurity.pro/Multiple%20XSS%20and%20CSRF%20in%20Pulse%20Connect%20Secure%20v8.3R1.pdf - http://www.securityfocus.com/bid/99615
CVE ID: CVE-2017-11196 State: PUBLISHED Published: 2017-07-12T20:00:00 Last Updated: 2024-08-05T18:05:28.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pulse Connect Secure 8.3R1 has CSRF in logout.cgi. The logout function of the admin panel is not protected by any CSRF tokens, thus allowing an attacker to logout a user by making them visit a malicious web page. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/sxcurity/status/884556905145937921 - http://www.sxcurity.pro/Multiple%20XSS%20and%20CSRF%20in%20Pulse%20Connect%20Secure%20v8.3R1.pdf - http://www.securityfocus.com/bid/99613
CVE ID: CVE-2017-11197 State: PUBLISHED Published: 2023-05-03T00:00:00.000Z Last Updated: 2025-01-30T17:16:32.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CyberArk Viewfinity 5.5.10.95 and 6.x before 6.1.1.220, a low privilege user can escalate to an administrative user via a bug within the "add printer" option. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://lp.cyberark.com/rs/316-CZP-275/images/ds-Viewfinity-102315-web.pdf - https://www.exploit-db.com/exploits/42319
CVE ID: CVE-2017-11198 State: PUBLISHED Published: 2017-07-13T01:00:00 Last Updated: 2024-08-05T18:05:28.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in /application/lib/ajax/get_image.php in FineCMS through 2017-07-12 allows remote attackers to inject arbitrary web script or HTML via the folder, id, or name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://lorexxar.cn/2017/07/11/Some%20Vulnerability%20for%20FineCMS%20through%202017.7.11/#Reflected-XSS-in-get-image-php
CVE ID: CVE-2017-11200 State: PUBLISHED Published: 2017-07-13T01:00:00 Last Updated: 2024-08-05T18:05:28.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection exists in FineCMS through 2017-07-12 via the application/core/controller/excludes.php visitor_ip parameter. Additional Analyst Notes: - CVE Program Container: References: - http://lorexxar.cn/2017/07/11/Some%20Vulnerability%20for%20FineCMS%20through%202017.7.11/#Authenticated-SQL-injection
CVE ID: CVE-2017-11201 State: PUBLISHED Published: 2017-07-13T01:00:00 Last Updated: 2024-08-05T18:05:28.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: application/core/controller/images.php in FineCMS through 2017-07-12 allows remote authenticated admins to conduct XSS attacks by uploading an image via a route=images action. Additional Analyst Notes: - CVE Program Container: References: - http://lorexxar.cn/2017/07/11/Some%20Vulnerability%20for%20FineCMS%20through%202017.7.11/#Stored-XSS-in-images-php
CVE ID: CVE-2017-11202 State: PUBLISHED Published: 2017-07-13T01:00:00 Last Updated: 2024-08-05T18:05:28.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: FineCMS through 2017-07-12 allows XSS in visitors.php because JavaScript in visited URLs is not restricted either during logging or during the reading of logs, a different vulnerability than CVE-2017-11180. Additional Analyst Notes: - CVE Program Container: References: - http://lorexxar.cn/2017/07/11/Some%20Vulnerability%20for%20FineCMS%20through%202017.7.11/#Stored-XSS-in-visitors-php
CVE ID: CVE-2017-11209 State: PUBLISHED Published: 2017-08-11T19:00:00Z Last Updated: 2024-09-17T04:00:22.316Z Vendors: Adobe Systems Incorporated Products: Acrobat Reader Problem Types: Memory Corruption Description: Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability that occurs when reading a JPEG file embedded within XML Paper Specification (XPS) file. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100184 - https://helpx.adobe.com/security/products/
VE Program Container: References: - http://www.securityfocus.com/bid/100184 - https://helpx.adobe.com/security/products/acrobat/apsb17-24.html - http://www.securitytracker.com/id/1039098
CVE ID: CVE-2017-11210 State: PUBLISHED Published: 2017-08-11T19:00:00Z Last Updated: 2024-09-16T18:40:00.974Z Vendors: Adobe Systems Incorporated Products: Acrobat Reader Problem Types: Memory Corruption Description: Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the font parsing, where the font is embedded in the XML Paper Specification (XPS) file. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100184 - https://helpx.adobe.com/security/product
CVE Program Container: References: - http://www.securityfocus.com/bid/100184 - https://helpx.adobe.com/security/products/acrobat/apsb17-24.html - http://www.securitytracker.com/id/1039098
CVE ID: CVE-2017-11211 State: PUBLISHED Published: 2017-08-11T19:00:00Z Last Updated: 2024-09-16T16:53:41.727Z Vendors: Adobe Systems Incorporated Products: Acrobat Reader Problem Types: Heap Overflow Description: Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable heap overflow vulnerability in the JPEG parser. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100180 - https://helpx.adobe.com/security/products/acrobat/apsb17-24.html - http://www.securitytracker.com/id/1039098
CVE ID: CVE-2017-11212 State: PUBLISHED Published: 2017-08-11T19:00:00Z Last Updated: 2024-09-16T20:27:39.927Z Vendors: Adobe Systems Incorporated Products: Acrobat Reader Problem Types: Memory Corruption Description: Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to text output. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb17-24.html -
Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb17-24.html - http://www.securitytracker.com/id/1039098 - http://www.securityfocus.com/bid/100179
CVE ID: CVE-2017-11213 State: PUBLISHED Published: 2017-12-09T06:00:00 Last Updated: 2024-08-05T18:05:28.781Z Vendors: n/a Products: Adobe Flash Player 27.0.0.183 and earlier versions Problem Types: Integer Overflow causes Out-of-bounds Read Description: An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer due to an integer overflow; the computation is part of the abstraction that creates an arbitrarily sized transparent or opaque bitmap image. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the v
image. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/flash-player/apsb17-33.html - https://access.redhat.com/errata/RHSA-2017:3222 - https://security.gentoo.org/glsa/201711-13 - http://www.securityfocus.com/bid/101837 - http://www.securitytracker.com/id/1039778
CVE ID: CVE-2017-11214 State: PUBLISHED Published: 2017-08-11T19:00:00Z Last Updated: 2024-09-17T02:27:54.823Z Vendors: Adobe Systems Incorporated Products: Acrobat Reader Problem Types: Memory Corruption Description: Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to rendering a path. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb17-24.h
onal Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb17-24.html - http://www.securitytracker.com/id/1039098 - http://www.securityfocus.com/bid/100179