deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-7674
Published: 2017-08-11
Description: The CORS Filter in Apache Tomcat 9.0.0.M1 to 9.0.0.M21, 8.5.0 to 8.5.15, 8.0.0.RC1 to 8.0.44 and 7.0.41 to 7.0.78 did not add an HTTP Vary header indicating that the response varies depending on Origin. This permitted client and server side cache poisoning in some circumstances.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-345
References: http://www.debian.org/security/2017/dsa-3974; http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html; http://www.securityfocus.com/bid/100280
CVE: CVE-2017-7675
Published: 2017-08-11
Description: The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M21 and 8.5.0 to 8.5.15 bypassed a number of security checks that prevented directory traversal attacks. It was therefore possible to bypass security constraints using a specially crafted URL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.debian.org/security/2017/dsa-3974; http://www.securityfocus.com/bid/100256; https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E
CVE: CVE-2017-8258
Published: 2017-08-11
Description: An array out-of-bounds access in all Qualcomm products with Android releases from CAF using the Linux kernel can potentially occur in a camera driver.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-200
References: http://www.securityfocus.com/bid/99465; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99465
CVE: CVE-2017-8259
Published: 2017-08-11
Description: In the service locator in all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow can occur as the variable set for determining the size of the buffer is not used to indicate the size of the buffer.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: http://www.securityfocus.com/bid/99465; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99465
CVE: CVE-2017-8264
Published: 2017-08-11
Description: A userspace process can cause a Denial of Service in the camera driver in all Qualcomm products with Android releases from CAF using the Linux kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-400
References: http://www.securityfocus.com/bid/99465; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99465
CVE: CVE-2017-8269
Published: 2017-08-11
Description: Userspace-controlled non null terminated parameter for IPA WAN ioctl in all Qualcomm products with Android releases from CAF using the Linux kernel can lead to exposure of kernel memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/99465; https://source.android.com/security/bulletin/2017-07-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2017-8271
Published: 2017-08-11
Description: Out of bound memory write can happen in the MDSS Rotator driver in all Qualcomm products with Android releases from CAF using the Linux kernel by an unsanitized userspace-controlled parameter.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/99465; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99465
CVE: CVE-2017-8273
Published: 2017-08-11
Description: In all Qualcomm products with Android release from CAF using the Linux kernel, while processing fastboot boot command when verified boot feature is disabled, with length greater than boot image buffer, a buffer overflow can occur.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99465; https://source.android.com/security/bulletin/2017-07-01; http://www.securityfocus.com/bid/99465
CVE: CVE-2017-11148
Published: 2017-08-11
Description: Server-side request forgery (SSRF) vulnerability in link preview in Synology Chat before 1.1.0-0806 allows remote authenticated users to access intranet resources via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918, CWE-918
References: http://www.securityfocus.com/bid/100310; https://www.synology.com/en-global/support/security/Synology_SA_17_38_Chat; http://www.securityfocus.com/bid/100310
CVE: CVE-2017-11209
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability that occurs when reading a JPEG file embedded within XML Paper Specification (XPS) file. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100184; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11210
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the font parsing, where the font is embedded in the XML Paper Specification (XPS) file. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100184; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11211
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable heap overflow vulnerability in the JPEG parser. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100180; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11212
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to text output. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100179; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11214
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to rendering a path. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100179; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11216
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to bitmap transformations. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100179; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11217
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to drawing of Unicode text strings. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100184; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11218
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in XFA event management. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/100182; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11219
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the XFA rendering engine. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/100182; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11220
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable heap overflow vulnerability in an internal data structure. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100180; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11221
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable type confusion vulnerability in the annotation functionality. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-704
References: http://www.securityfocus.com/bid/100181; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11222
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the Product Representation Compact (PRC) engine. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100179; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11223
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the core of the XFA engine. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/100182; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11224
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the XFA layout engine. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/100182; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11226
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image processing engine when processing JPEG 2000 (JP2) code stream data. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100179; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11227
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100179; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11228
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing JPEG 2000 (JP2) code stream data. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100179; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11229
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has a security bypass vulnerability when manipulating Forms Data Format (FDF).
CVSS Score: 8.8 (HIGH)
References: http://www.securityfocus.com/bid/100186; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11230
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the JPEG 2000 engine. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100184; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11231
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in Acrobat/Reader rendering engine. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/100182; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11232
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability when processing Enhanced Metafile Format (EMF) data related to brush manipulation. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-416
References: http://www.securityfocus.com/bid/100185; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11233
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to block transfer of pixels. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100184; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11234
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing TIFF data related to the way how the components of each pixel are stored. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100179; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11235
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the image conversion engine when decompressing JPEG data. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/100182; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11236
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the internal handling of UTF-16 literal strings. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100184; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11237
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the font parsing module. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100179; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11238
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to curve drawing. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100184; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11239
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to text strings. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100184; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11241
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable heap overflow vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to polygons. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100180; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11242
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to line segments. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100184; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11243
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the XSLT engine. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100184; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11244
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to transformation of blocks of pixels. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100184; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11245
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100184; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11246
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when parsing JPEG data. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100184; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html
CVE: CVE-2017-11248
Published: 2017-08-11
Description: Adobe Acrobat Reader 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to pixel block transfer. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100184; http://www.securitytracker.com/id/1039098; https://helpx.adobe.com/security/products/acrobat/apsb17-24.html