deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-0189
Published: 2017-04-12
Description: An elevation of privilege vulnerability exists in Windows 10 when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode, aka "Win32k Elevation of Privilege Vulnerability." This CVE ID is unique from CVE-2017-0188.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/97420; http://www.securitytracker.com/id/1038239; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0189
CVE: CVE-2017-0191
Published: 2017-04-12
Description: A denial of service vulnerability exists in the way that Windows 7, Windows 8.1, Windows 10, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding, aka "Windows Denial of Service Vulnerability."
CVSS Score: 5.8 (MEDIUM)
References: http://www.securityfocus.com/bid/97466; http://www.securitytracker.com/id/1038239; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0191
CVE: CVE-2017-0192
Published: 2017-04-12
Description: The Adobe Type Manager Font Driver (ATMFD.dll) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold , 1511, 1607, and 1703 allows an attacker to gain sensitive information via a specially crafted document or an untrusted website, aka "ATMFD.dll Information Disclosure Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97452; http://www.securitytracker.com/id/1038231; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0192
CVE: CVE-2017-0194
Published: 2017-04-12
Description: Microsoft Excel 2007 SP3, Microsoft Excel 2010 SP2, and Office Compatibility Pack SP2 allow remote attackers to obtain sensitive information from process memory via a crafted Office document, aka "Microsoft Office Information Disclosure Vulnerability."
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97436; http://www.securitytracker.com/id/1038244; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0194
CVE: CVE-2017-0195
Published: 2017-04-12
Description: Microsoft Excel Services on Microsoft SharePoint Server 2010 SP1 and SP2, Microsoft Excel Web Apps 2010 SP2, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps Server 2013 SP1 and Office Online Server allows remote attackers to perform cross-site scripting and run script with local user privileges via a crafted request, aka "Microsoft Office XSS Elevation of Privilege Vulnerability."
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/97417; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0195; http://www.securityfocus.com/bid/97417
CVE: CVE-2017-0197
Published: 2017-04-12
Description: Microsoft OneNote 2007 SP3 and Microsoft OneNote 2010 SP2 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office DLL Loading Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/97411; http://www.securitytracker.com/id/1038241; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0197
CVE: CVE-2017-0199
Published: 2017-04-12
Description: Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows API."
CVSS Score: 7.8 (HIGH)
References: http://rewtin.blogspot.nl/2017/04/cve-2017-0199-practical-exploitation-poc.html; http://www.securityfocus.com/bid/97498; http://www.securitytracker.com/id/1038224
CVE: CVE-2017-0200
Published: 2017-04-12
Description: A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user, aka "Microsoft Edge Memory Corruption Vulnerability."
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97456; http://www.securitytracker.com/id/1038234; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0200
CVE: CVE-2017-0201
Published: 2017-04-12
Description: A remote code execution vulnerability exists in Internet Explorer in the way that the JScript and VBScript engines render when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0093.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97454; http://www.securitytracker.com/id/1038238; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0201
CVE: CVE-2017-0202
Published: 2017-04-12
Description: A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user, a.k.a. "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97441; http://www.securitytracker.com/id/1038238; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0202
CVE: CVE-2017-0203
Published: 2017-04-12
Description: A vulnerability exists in Microsoft Edge when the Edge Content Security Policy (CSP) fails to properly validate certain specially crafted documents. An attacker could trick a user into loading a web page with malicious content, aka "Microsoft Edge Security Feature Bypass Vulnerability."
CVSS Score: 4.3 (MEDIUM)
References: http://www.securityfocus.com/bid/97443; http://www.securitytracker.com/id/1038234; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0203
CVE: CVE-2017-0204
Published: 2017-04-12
Description: Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remote attackers to bypass the Office Protected View via a specially crafted document, aka "Microsoft Office Security Feature Bypass Vulnerability."
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/97458; http://www.securitytracker.com/id/1038227; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0204
CVE: CVE-2017-0205
Published: 2017-04-12
Description: A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user, aka "Microsoft Edge Memory Corruption Vulnerability."
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97442; http://www.securitytracker.com/id/1038234; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0205
CVE: CVE-2017-0207
Published: 2017-04-12
Description: Microsoft Outlook for Mac 2011 allows remote attackers to spoof web content via a crafted email with specific HTML tags, aka "Microsoft Browser Spoofing Vulnerability."
CVSS Score: 6.5 (MEDIUM)
References: http://www.securityfocus.com/bid/97463; http://www.securitytracker.com/id/1038242; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0207
CVE: CVE-2017-0208
Published: 2017-04-12
Description: An information disclosure vulnerability exists in Microsoft Edge when the Chakra scripting engine does not properly handle objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user's system, a.k.a. "Scripting Engine Information Disclosure Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97460; http://www.securitytracker.com/id/1038234; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0208
CVE: CVE-2017-0210
Published: 2017-04-12
Description: An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka "Internet Explorer Elevation of Privilege Vulnerability."
CVSS Score: 8.8 (HIGH)
References: http://www.securityfocus.com/bid/97512; http://www.securitytracker.com/id/1038238; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0210
CVE: CVE-2017-0211
Published: 2017-04-12
Description: An elevation of privilege vulnerability exists in Windows 10, Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 versions of Microsoft Windows OLE when it fails an integrity-level check, aka "Windows OLE Elevation of Privilege Vulnerability."
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-610
References: http://www.securityfocus.com/bid/97514; http://www.securitytracker.com/id/1038240; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0211
CVE: CVE-2017-2989
Published: 2017-04-12
Description: Adobe Campaign versions Build 8770 and earlier have an input validation bypass that could be exploited to read, write, or delete data from the Campaign database.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/97552; https://helpx.adobe.com/security/products/campaign/apsb17-09.html; http://www.securityfocus.com/bid/97552
CVE: CVE-2017-3004
Published: 2017-04-12
Description: Adobe Photoshop versions CC 2017 (18.0.1) and earlier, CC 2015.5.1 (17.0.1) and earlier have a memory corruption vulnerability when parsing malicious PCX files. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97559; http://www.securitytracker.com/id/1038229; https://helpx.adobe.com/security/products/photoshop/apsb17-12.html
CVE: CVE-2017-3005
Published: 2017-04-12
Description: Adobe Photoshop versions CC 2017 (18.0.1) and earlier, CC 2015.5.1 (17.0.1) and earlier have an unquoted search path vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: http://www.securityfocus.com/bid/97553; http://www.securitytracker.com/id/1038229; https://helpx.adobe.com/security/products/photoshop/apsb17-12.html
CVE: CVE-2017-3006
Published: 2017-04-12
Description: Adobe Thor versions 3.9.5.353 and earlier have a vulnerability related to the use of improper resource permissions during the installation of Creative Cloud desktop applications.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: http://hyp3rlinx.altervista.org/advisories/ADOBE-CREATIVE-CLOUD-PRIVILEGE-ESCALATION.txt; http://www.securityfocus.com/bid/97555; https://helpx.adobe.com/security/products/creative-cloud/apsb17-13.html
CVE: CVE-2017-3007
Published: 2017-04-12
Description: Adobe Thor versions 3.9.5.353 and earlier have a vulnerability in the directory search path used to find resources, related to Creative Cloud desktop applications.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://www.securityfocus.com/bid/97558; https://helpx.adobe.com/security/products/creative-cloud/apsb17-13.html; http://www.securityfocus.com/bid/97558
CVE: CVE-2017-3011
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable integer overflow vulnerability in the CCITT fax PDF filter. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/97548; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3012
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading (DLL hijacking) vulnerability in the OCR plugin.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: http://www.securityfocus.com/bid/97547; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3013
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading (DLL hijacking) vulnerability in a DLL related to remote logging.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: http://www.securityfocus.com/bid/97547; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3014
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vulnerability in XML Forms Architecture (XFA) related to reset form functionality. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/97550; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3015
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the JBIG2 parsing functionality. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97556; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3017
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability when handling a malformed PDF file. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97556; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3018
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the renderer functionality. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97556; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3019
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the Product Representation Compact (PRC) format parser. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/97556; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3020
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the weblink module.
CVSS Score: 3.3 (LOW)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97554; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3021
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the JPEG 2000 parser engine.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: http://www.securityfocus.com/bid/97554; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3022
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability when parsing the header of a JPEG 2000 file.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: http://www.securityfocus.com/bid/97554; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3023
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the JPEG 2000 code-stream tile functionality. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97556; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3024
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability when manipulating PDF annotations. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97556; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3025
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability related to internal object representation manipulation. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97556; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3026
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vulnerability when manipulating an internal data structure. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/97550; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3027
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vulnerability in the XFA module, related to the choiceList element. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/97550; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3028
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the image conversion module, related to processing of TIFF files. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97556; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3029
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability when handling a JPEG 2000 code-stream.
CVSS Score: 3.3 (LOW)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97554; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3030
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the AES module. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97556; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3031
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the XSLT engine.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: http://www.securityfocus.com/bid/97554; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3032
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the JPEG 2000 code-stream parser.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: http://www.securityfocus.com/bid/97554; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3033
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability when handling JPEG 2000 code-stream tile data.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: http://www.securityfocus.com/bid/97554; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3034
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable integer overflow vulnerability in the XML Forms Architecture (XFA) engine, related to layout functionality. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-191
References: http://www.securityfocus.com/bid/97548; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3035
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vulnerability in the XML Forms Architecture (XFA) engine. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/97550; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3036
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in image conversion related to processing of the PCX (picture exchange) file format. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/97556; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html
CVE: CVE-2017-3037
Published: 2017-04-12
Description: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the JavaScript engine. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97556; http://www.securitytracker.com/id/1038228; https://helpx.adobe.com/security/products/acrobat/apsb17-11.html