Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-16338 State: PUBLISHED Published: 2018-08-02T19:00:00 Last Updated: 2024-08-05T20:20:05.683Z Severity: HIGH (CVSS 8.5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Insteon Products: Insteon Problem Types: Buffer overflow Description: An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01bad0 the value for the host key is copied using strcpy to the buffer at 0xa00016e0. This buffer is 32 bytes large, sending anything longer will cause a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0
alyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484
CVE ID: CVE-2017-16339 State: PUBLISHED Published: 2018-08-02T19:00:00 Last Updated: 2024-08-05T20:20:05.557Z Severity: HIGH (CVSS 8.5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Insteon Products: Insteon Problem Types: Buffer overflow Description: An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01bb1c the value for the uri key is copied using strcpy to the buffer at 0xa00016a0. This buffer is 64 bytes large, sending anything longer will cause a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-04
lyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484
CVE ID: CVE-2017-16340 State: PUBLISHED Published: 2018-08-02T19:00:00 Last Updated: 2024-08-05T20:20:05.570Z Severity: HIGH (CVSS 8.5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Insteon Products: Insteon Problem Types: Buffer overflow Description: An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c0e8 the value for the s_dport key is copied using strcpy to the buffer at 0xa000180c. This buffer is 6 bytes large, sending anything longer will cause a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017
Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484
CVE ID: CVE-2017-16341 State: PUBLISHED Published: 2018-08-02T19:00:00 Last Updated: 2024-08-05T20:20:05.535Z Severity: HIGH (CVSS 8.5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Insteon Products: Insteon Problem Types: Buffer overflow Description: An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c224 the value for the s_vol_play key is copied using strcpy to the buffer at 0xa0000418. This buffer is maximum 8 bytes large (this is the maximum size it could be, it is possible other global variables are stored between this variable and the next one that we could identify), sending anything longer
ther global variables are stored between this variable and the next one that we could identify), sending anything longer will cause a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484
CVE ID: CVE-2017-16342 State: PUBLISHED Published: 2018-08-02T19:00:00 Last Updated: 2024-08-05T20:20:05.504Z Severity: HIGH (CVSS 8.5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Insteon Products: Insteon Problem Types: Buffer overflow Description: An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c254 the value for the s_vol_dim_delta key is copied using strcpy to the buffer at 0xa0000514. This buffer is 4 bytes large, sending anything longer will cause a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TA
itional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484
CVE ID: CVE-2017-16343 State: PUBLISHED Published: 2018-08-02T19:00:00 Last Updated: 2024-08-05T20:20:05.578Z Severity: HIGH (CVSS 8.5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Insteon Products: Insteon Problem Types: Buffer overflow Description: An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c284 the value for the s_vol_brt_delta key is copied using strcpy to the buffer at 0xa0000510. This buffer is 4 bytes large, sending anything longer will cause a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TA
CVE ID: CVE-2017-16344 State: PUBLISHED Published: 2018-08-02T19:00:00 Last Updated: 2024-08-05T20:20:05.577Z Severity: HIGH (CVSS 8.5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Insteon Products: Insteon Problem Types: Buffer overflow Description: An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c2c8 the value for the s_url key is copied using strcpy to the buffer at 0xa0001a0c. This buffer is 16 bytes large, sending anything longer will cause a buffer overflow. The destination can also be shifted by using an sn_speaker parameter between "0" and "3". Additional Analyst Notes: - CVE Program Co
ion can also be shifted by using an sn_speaker parameter between "0" and "3". Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484
CVE ID: CVE-2017-16345 State: PUBLISHED Published: 2018-08-02T19:00:00 Last Updated: 2024-08-05T20:20:05.557Z Severity: HIGH (CVSS 8.5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Insteon Products: Insteon Problem Types: Buffer overflow Description: An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c318 the value for the s_port key is copied using strcpy to the buffer at 0xa00017f4. This buffer is 6 bytes large, sending anything longer will cause a buffer overflow. The destination can also be shifted by using an sn_speaker parameter between "0" and "3". Additional Analyst Notes: - CVE Program Co
CVE ID: CVE-2017-16346 State: PUBLISHED Published: 2018-08-02T19:00:00 Last Updated: 2024-08-05T20:20:05.614Z Severity: HIGH (CVSS 8.5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Insteon Products: Insteon Problem Types: Buffer overflow Description: An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c368 the value for the s_mac key is copied using strcpy to the buffer at 0xa000170c. This buffer is 25 bytes large, sending anything longer will cause a buffer overflow. The destination can also be shifted by using an sn_speaker parameter between "0" and "3". Additional Analyst Notes: - CVE Program Co
CVE ID: CVE-2017-16347 State: PUBLISHED Published: 2018-08-02T19:00:00 Last Updated: 2024-08-05T20:20:05.640Z Severity: HIGH (CVSS 8.5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Insteon Products: Insteon Problem Types: Buffer overflow Description: An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01e7d4 the value for the s_vol key is copied using strcpy to the buffer at 0xa0001700. This buffer is maximum 12 bytes large (this is the maximum size it could be, it is possible other global variables are stored between this variable and the next one that we could identify), sending anything longer wil
global variables are stored between this variable and the next one that we could identify), sending anything longer will cause a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484
CVE ID: CVE-2017-16348 State: PUBLISHED Published: 2018-08-23T14:00:00Z Last Updated: 2024-09-17T01:16:39.733Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Insteon Products: Insteon Problem Types: denial of service Description: An exploitable denial of service vulnerability exists in Insteon Hub running firmware version 1012. Leftover demo functionality allows for arbitrarily rebooting the device without authentication. An attacker can send a UDP packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0485
CVE ID: CVE-2017-16349 State: PUBLISHED Published: 2018-08-02T19:00:00 Last Updated: 2024-08-05T20:20:05.518Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L) Vendors: Insteon Products: SAP Problem Types: Improper Restriction of XML External Entity Reference Description: An exploitable XML external entity vulnerability exists in the reporting functionality of SAP BPC. A specially crafted XML request can cause an XML external entity to be referenced, resulting in information disclosure and potential denial of service. An attacker can issue authenticated HTTP requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https:/
ed HTTP requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/SAP
CVE ID: CVE-2017-16350 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2017-16351 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2017-16352 State: PUBLISHED Published: 2017-11-01T15:00:00 Last Updated: 2024-08-05T20:20:05.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the "Display visual image directory" feature of the DescribeImage() function of the magick/describe.c file. One possible way to trigger the vulnerability is to run the identify command on a specially crafted MIFF format file with the verbose flag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101658 - https://www.exploit-db.com/exploits/43111/ - http://hg.graphicsmagick.org/hg/Graphics
www.securityfocus.com/bid/101658 - https://www.exploit-db.com/exploits/43111/ - http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=7292230dd185 - https://www.debian.org/security/2018/dsa-4321 - https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html - https://blogs.securiteam.com/index.php/archives/3494 - https://lists.debian.org/debian-lts-announce/2017/11/msg00002.html - ftp://ftp.graphicsmagick.org/pub/GraphicsMagick/snapshots/ChangeLog.txt - https://usn.ubuntu.com/4232-1/
CVE ID: CVE-2017-16353 State: PUBLISHED Published: 2017-11-01T15:00:00 Last Updated: 2024-08-05T20:20:05.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: GraphicsMagick 1.3.26 is vulnerable to a memory information disclosure vulnerability found in the DescribeImage function of the magick/describe.c file, because of a heap-based buffer over-read. The portion of the code containing the vulnerability is responsible for printing the IPTC Profile information contained in the image. This vulnerability can be triggered with a specially crafted MIFF file. There is an out-of-bounds buffer dereference because certain increments are never checked. Additional Analyst Notes: - CVE Program
out-of-bounds buffer dereference because certain increments are never checked. Additional Analyst Notes: - CVE Program Container: References: - http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=e4e1c2a581d8 - http://www.securityfocus.com/bid/101653 - https://www.exploit-db.com/exploits/43111/ - https://www.debian.org/security/2018/dsa-4321 - https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html - https://blogs.securiteam.com/index.php/archives/3494 - https://lists.debian.org/debian-lts-announce/2017/11/msg00002.html - ftp://ftp.graphicsmagick.org/pub/GraphicsMagick/snapshots/ChangeLog.txt - https://usn.ubuntu.com/4232-1/
CVE ID: CVE-2017-16355 State: PUBLISHED Published: 2017-12-14T22:00:00 Last Updated: 2024-08-05T20:20:05.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: In agent/Core/SpawningKit/Spawner.h in Phusion Passenger 5.1.10 (fixed in Passenger Open Source 5.1.11 and Passenger Enterprise 5.1.10), if Passenger is running as root, it is possible to list the contents of arbitrary files on a system by symlinking a file named REVISION from the application root folder to a file of choice and querying passenger-status --show=xml. Additional Analyst Notes: - CVE Program Container: References: - https://blog.phusion.nl/2017/10/13/passenger-security-advisory-5-1-11/ - https://github.com/phusio
tainer: References: - https://blog.phusion.nl/2017/10/13/passenger-security-advisory-5-1-11/ - https://github.com/phusion/passenger/commit/4043718264095cde6623c2cbe8c644541036d7bf - https://www.debian.org/security/2019/dsa-4415 - https://seclists.org/bugtraq/2019/Mar/34
CVE ID: CVE-2017-16356 State: PUBLISHED Published: 2018-02-20T15:00:00 Last Updated: 2024-08-05T20:20:05.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected XSS in Kubik-Rubik SIGE (aka Simple Image Gallery Extended) before 3.3.0 allows attackers to execute JavaScript in a victim's browser by having them visit a plugins/content/sige/plugin_sige/print.php link with a crafted img, name, or caption parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44104/ - http://packetstormsecurity.com/files/146422/Joomla-Kubik-Rubik-SIGE-3.2.3-Cross-Site-Scripting.html
CVE ID: CVE-2017-16357 State: PUBLISHED Published: 2017-11-01T17:00:00Z Last Updated: 2024-09-17T03:19:10.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: In radare 2.0.1, a memory corruption vulnerability exists in store_versioninfo_gnu_verdef() and store_versioninfo_gnu_verneed() in libr/bin/format/elf/elf.c, as demonstrated by an invalid free. This error is due to improper sh_size validation when allocating memory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radare/radare2/issues/8742 - https://github.com/radare/radare2/commit/0b973e28166636e0ff1fad80baa0385c9c09c53a
CVE ID: CVE-2017-16358 State: PUBLISHED Published: 2017-11-01T17:00:00Z Last Updated: 2024-09-17T02:11:10.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: In radare 2.0.1, an out-of-bounds read vulnerability exists in string_scan_range() in libr/bin/bin.c when doing a string search. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radare/radare2/issues/8748 - https://github.com/radare/radare2/commit/d31c4d3cbdbe01ea3ded16a584de94149ecd31d9
CVE ID: CVE-2017-16359 State: PUBLISHED Published: 2017-11-01T17:00:00Z Last Updated: 2024-09-17T03:59:30.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: In radare 2.0.1, a pointer wraparound vulnerability exists in store_versioninfo_gnu_verdef() in libr/bin/format/elf/elf.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radare/radare2/commit/62e39f34b2705131a2d08aff0c2e542c6a52cf0e - https://github.com/radare/radare2/commit/d21e91f075a7a7a8ed23baa5c1bb1fac48313882 - https://github.com/radare/radare2/commit/fbaf24bce7ea4211e4608b3ab6c1b45702cb243d - https://github.com/radare/radare2/issues/8764
CVE ID: CVE-2017-16360 State: PUBLISHED Published: 2017-12-09T06:00:00 Last Updated: 2024-08-05T20:27:03.423Z Vendors: n/a Products: Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions Problem Types: Use After Free Description: An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the MakeAccessible plugin, when creating an internal data structure. The mismatch between an o
ter free vulnerability in the MakeAccessible plugin, when creating an internal data structure. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101818 - http://www.securitytracker.com/id/1039791 - https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
CVE ID: CVE-2017-16361 State: PUBLISHED Published: 2017-12-09T06:00:00 Last Updated: 2024-08-05T20:27:02.581Z Vendors: n/a Products: Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions Problem Types: Security Bypass Description: An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a security bypass vulnerability when handling XFDF files. Additional Analyst Notes: - CVE Program Container: References: - http
ity bypass vulnerability when handling XFDF files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039791 - https://helpx.adobe.com/security/products/acrobat/apsb17-36.html - http://www.securityfocus.com/bid/101830
CVE ID: CVE-2017-16362 State: PUBLISHED Published: 2017-12-09T06:00:00 Last Updated: 2024-08-05T20:27:02.538Z Vendors: n/a Products: Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions Problem Types: Out-of-bounds Read Description: An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of an out of bounds read vulnerability in the MakeAccesible plugin, when handling font data. It causes an out of bounds memory
ut of bounds read vulnerability in the MakeAccesible plugin, when handling font data. It causes an out of bounds memory access, which sometimes triggers an access violation exception. Attackers can exploit the vulnerability by using the out of bounds access for unintended reads, writes, or frees, potentially leading to code corruption, control-flow hijack, or an information leak attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039791 - https://helpx.adobe.com/security/products/acrobat/apsb17-36.html - http://www.securityfocus.com/bid/102140
CVE ID: CVE-2017-16363 State: PUBLISHED Published: 2017-12-09T06:00:00 Last Updated: 2024-08-05T20:27:02.554Z Vendors: n/a Products: Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions Problem Types: Buffer Over-read Description: An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the module that handles character codes for certain textual representations. Invalid input leads to a computat
r-read in the module that handles character codes for certain textual representations. Invalid input leads to a computation where the pointer arithmetic results in a location outside valid memory locations belonging to the buffer. An attack can be used to obtain sensitive information, such as object heap addresses, etc. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039791 - https://helpx.adobe.com/security/products/acrobat/apsb17-36.html - http://www.securityfocus.com/bid/101824
CVE ID: CVE-2017-16364 State: PUBLISHED Published: 2017-12-09T06:00:00 Last Updated: 2024-08-05T20:27:02.552Z Vendors: n/a Products: Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions Problem Types: Untrusted Pointer Dereference Description: An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This issue is due to an untrusted pointer dereference when handling number format dictionary entries. In this scenario, the input is crafted in way th
ted pointer dereference when handling number format dictionary entries. In this scenario, the input is crafted in way that the computation results in pointers to memory locations that do not belong to the relevant process address space. The dereferencing operation is a read operation, and an attack can result in sensitive data exposure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039791 - https://helpx.adobe.com/security/products/acrobat/apsb17-36.html - http://www.securityfocus.com/bid/101813
CVE ID: CVE-2017-16365 State: PUBLISHED Published: 2017-12-09T06:00:00 Last Updated: 2024-08-05T20:27:02.760Z Vendors: n/a Products: Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions Problem Types: Buffer Over-read Description: An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the True Type2 Font parsing module. A corrupted cmap table input leads to a computation where the pointer arit
r-read in the True Type2 Font parsing module. A corrupted cmap table input leads to a computation where the pointer arithmetic results in a location outside valid memory locations belonging to the buffer. An attack can be used to obtain sensitive information, such as object heap addresses, etc. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039791 - https://helpx.adobe.com/security/products/acrobat/apsb17-36.html - http://www.securityfocus.com/bid/101824
CVE ID: CVE-2017-16366 State: PUBLISHED Published: 2017-12-09T06:00:00 Last Updated: 2024-08-05T20:27:02.542Z Vendors: n/a Products: Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions Problem Types: Security Bypass Description: An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a security bypass vulnerability in the AcroPDF plugin. Additional Analyst Notes: - CVE Program Container: References: - http://
ity bypass vulnerability in the AcroPDF plugin. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039791 - https://helpx.adobe.com/security/products/acrobat/apsb17-36.html - http://www.securityfocus.com/bid/101830