Adobe Acrobat and Reader Multiple Buffer Overflow Vulnerabilities

Bugtraq ID:	101824
Class:	Boundary Condition Error
CVE:	CVE-2017-16363 CVE-2017-16365 CVE-2017-16374 CVE-2017-16384 CVE-2017-16386 CVE-2017-16387
Remote:	Yes
Local:	No
Published:	Nov 14 2017 12:00AM
Updated:	Dec 19 2017 10:00PM
Credit:	Toan Pham Van,Ke Liu of Tencent�??s Xuanwu LAB.
Vulnerable:	Adobe Reader 11.0.22 Adobe Reader 11.0.21 Adobe Reader 11.0.20 Adobe Reader 11.0.19 Adobe Reader 11.0.18 Adobe Reader 11.0.17 Adobe Reader 11.0.16 Adobe Reader 11.0.12 Adobe Reader 11.0.11 Adobe Reader 11.0.7 Adobe Reader 11.0.6 Adobe Reader 11.0.4 Adobe Reader 11.0.3 Adobe Reader 11.0.1 Adobe Reader 11.0.15 Adobe Reader 11.0.14 Adobe Reader 11.0.13 Adobe Reader 11.0.10 Adobe Reader 11.0.09 Adobe Reader 11.0.08 Adobe Reader 11.0.05 Adobe Reader 11.0 Adobe Acrobat Reader DC 15.20.20042 Adobe Acrobat Reader DC 15.20.20039 Adobe Acrobat Reader DC 15.17.20053 Adobe Acrobat Reader DC 15.17.20050 Adobe Acrobat Reader DC 15.16.20045 Adobe Acrobat Reader DC 15.16.20039 Adobe Acrobat Reader DC 15.10.20060 Adobe Acrobat Reader DC 15.10.20059 Adobe Acrobat Reader DC 15.9.20077 Adobe Acrobat Reader DC 15.6.30244 Adobe Acrobat Reader DC 15.6.30243 Adobe Acrobat Reader DC 15.6.30201 Adobe Acrobat Reader DC 15.6.30198 Adobe Acrobat Reader DC 15.6.30174 Adobe Acrobat Reader DC 15.6.30172 Adobe Acrobat Reader DC 15.6.30121 Adobe Acrobat Reader DC 15.6.30097 Adobe Acrobat Reader DC 15.010.20056 Adobe Acrobat Reader DC 15.006.30119 Adobe Acrobat Reader 2017.11.30066 Adobe Acrobat Reader 2017.11.30059 Adobe Acrobat DC 2015.6.30355 Adobe Acrobat DC 2015.6.30352 Adobe Acrobat DC 2015.6.30306 Adobe Acrobat DC 15.20.20042 Adobe Acrobat DC 15.20.20039 Adobe Acrobat DC 15.17.20053 Adobe Acrobat DC 15.17.20050 Adobe Acrobat DC 15.16.20045 Adobe Acrobat DC 15.16.20039 Adobe Acrobat DC 15.10.20060 Adobe Acrobat DC 15.10.20059 Adobe Acrobat DC 15.9.20077 Adobe Acrobat DC 15.6.30244 Adobe Acrobat DC 15.6.30243 Adobe Acrobat DC 15.6.30201 Adobe Acrobat DC 15.6.30198 Adobe Acrobat DC 15.6.30174 Adobe Acrobat DC 15.6.30172 Adobe Acrobat DC 15.6.30121 Adobe Acrobat DC 15.6.30097 Adobe Acrobat DC 2015.006.30094 Adobe Acrobat DC 2015.006.30060 Adobe Acrobat DC 2015.006.30033 Adobe Acrobat DC 15.010.20056 Adobe Acrobat DC 15.006.30119 Adobe Acrobat 2017.11.30066 Adobe Acrobat 2017.11.30059 Adobe Acrobat 11.0.22 Adobe Acrobat 11.0.21 Adobe Acrobat 11.0.20 Adobe Acrobat 11.0.19 Adobe Acrobat 11.0.18 Adobe Acrobat 11.0.17 Adobe Acrobat 11.0.16 Adobe Acrobat 11.0.11 Adobe Acrobat 11.0.7 Adobe Acrobat 11.0.6 Adobe Acrobat 11.0.6 Adobe Acrobat 11.0.4 Adobe Acrobat 11.0.2 Adobe Acrobat 11.0 Adobe Acrobat 11.0.9 Adobe Acrobat 11.0.7 Adobe Acrobat 11.0.3 Adobe Acrobat 11.0.15 Adobe Acrobat 11.0.14 Adobe Acrobat 11.0.13 Adobe Acrobat 11.0.12 Adobe Acrobat 11.0.10 Adobe Acrobat 11.0.1 Adobe Acrobat 11.0.09 Adobe Acrobat 11.0.08 Adobe Acrobat 11.0
Not Vulnerable:	Adobe Reader 11.0.23 Adobe Acrobat Reader DC 2018.9.20044 Adobe Acrobat Reader DC 2015.6.30392 Adobe Acrobat Reader DC 2015.6.30355 Adobe Acrobat Reader DC 2015.6.30352 Adobe Acrobat Reader DC 2015.6.30306 Adobe Acrobat Reader DC 2015.6.30060 Adobe Acrobat Reader DC 2015.006.30094 Adobe Acrobat Reader DC 2015.006.30033 Adobe Acrobat Reader 2017.11.30068 Adobe Acrobat DC 2018.9.20044 Adobe Acrobat DC 2015.6.30392 Adobe Acrobat 2017.11.30068 Adobe Acrobat 11.0.23

Adobe Acrobat and Reader Multiple Buffer Overflow Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Adobe Acrobat and Reader Multiple Buffer Overflow Vulnerabilities

References:

• Acrobat Homepage (Adobe)
  
• Adobe Homepage (Adobe)
  
• Adobe Reader Homepage (Adobe)
  
• APSB17-36:Security Updates Available for Adobe Acrobat and Reader | APSB17-36 (Adobe)