Adobe Reader and Acrobat Out-of-bounds Read Multiple Remote Code Execution Vulnerabilities

Bugtraq ID:	102140
Class:	Unknown
CVE:	CVE-2017-16362 CVE-2017-16370 CVE-2017-16376 CVE-2017-16382 CVE-2017-16394 CVE-2017-16397 CVE-2017-16399 CVE-2017-16400 CVE-2017-16401 CVE-2017-16402 CVE-2017-16403 CVE-2017-16404 CVE-2017-16405 CVE-2017-16408 CVE-2017-16409 CVE-2017-16412 CVE-2017-16414 CVE-2017-16417 CVE-2017-16418 CVE-2017-16420 CVE-2017-11293
Remote:	Yes
Local:	No
Published:	Dec 12 2017 12:00AM
Updated:	Dec 19 2017 10:01PM
Credit:	Toan Pham Van (@__suto), Ke Liu of Tencent�??s Xuanwu LAB, Cybellum Technologies LTD cybellum.com, Ke Liu of Tencent's Xuanwu LAB working with Trend Micro's Zero Day Initiative, riusksk (??) of Tencent Security Platform Department, Lin Wang of Beihang Univ
Vulnerable:	Adobe Reader 11.0.21 Adobe Reader 11.0.20 Adobe Reader 11.0.19 Adobe Reader 11.0.18 Adobe Reader 11.0.17 Adobe Reader 11.0.16 Adobe Reader 11.0.12 Adobe Reader 11.0.11 Adobe Reader 11.0.7 Adobe Reader 11.0.6 Adobe Reader 11.0.4 Adobe Reader 11.0.3 Adobe Reader 11.0.1 Adobe Reader 11.0.15 Adobe Reader 11.0.14 Adobe Reader 11.0.13 Adobe Reader 11.0.10 Adobe Reader 11.0.09 Adobe Reader 11.0.08 Adobe Reader 11.0.05 Adobe Acrobat Reader DC 2017.12.20098 Adobe Acrobat Reader DC 2017.12.20093 Adobe Acrobat Reader DC 2017.9.20058 Adobe Acrobat Reader DC 2017.9.20044 Adobe Acrobat Reader DC 2015.8.20082 Adobe Acrobat Reader DC 2015.6.30355 Adobe Acrobat Reader DC 2015.6.30352 Adobe Acrobat Reader DC 2015.6.30306 Adobe Acrobat Reader DC 2015.6.30060 Adobe Acrobat Reader DC 15.23.20070 Adobe Acrobat Reader DC 15.23.20053 Adobe Acrobat Reader DC 15.20.20042 Adobe Acrobat Reader DC 15.20.20039 Adobe Acrobat Reader DC 15.17.20053 Adobe Acrobat Reader DC 15.17.20050 Adobe Acrobat Reader DC 15.16.20045 Adobe Acrobat Reader DC 15.16.20039 Adobe Acrobat Reader DC 15.10.20060 Adobe Acrobat Reader DC 15.10.20059 Adobe Acrobat Reader DC 15.9.20077 Adobe Acrobat Reader DC 15.6.30280 Adobe Acrobat Reader DC 15.6.30279 Adobe Acrobat Reader DC 15.6.30244 Adobe Acrobat Reader DC 15.6.30243 Adobe Acrobat Reader DC 15.6.30201 Adobe Acrobat Reader DC 15.6.30198 Adobe Acrobat Reader DC 15.6.30174 Adobe Acrobat Reader DC 15.6.30172 Adobe Acrobat Reader DC 15.6.30121 Adobe Acrobat Reader DC 15.6.30097 Adobe Acrobat Reader DC 2015.009.20069 Adobe Acrobat Reader DC 2015.007.20033 Adobe Acrobat Reader DC 2015.006.30094 Adobe Acrobat Reader DC 2015.006.30033 Adobe Acrobat Reader DC 15.010.20056 Adobe Acrobat Reader DC 15.006.30119 Adobe Acrobat Reader 2017.11.30066 Adobe Acrobat Reader 2017.11.30059 Adobe Acrobat Reader 2017.8.30051 Adobe Acrobat Reader 11.0.23 Adobe Acrobat Reader 11.0.22 Adobe Acrobat Reader 11.0.9 Adobe Acrobat Reader 11.0.7 Adobe Acrobat Reader 11.0.6 Adobe Acrobat Reader 11.0.4 Adobe Acrobat Reader 11.0.4 Adobe Acrobat Reader 11.0.3 Adobe Acrobat Reader 11.0.2 Adobe Acrobat Reader 11.0.7 Adobe Acrobat Reader 11.0.3 Adobe Acrobat Reader 11.0.1 Adobe Acrobat Reader 11.0.08 Adobe Acrobat Reader 11.0.06 Adobe Acrobat Reader 11.0.05 Adobe Acrobat Reader 11.0.01 Adobe Acrobat Reader 11.0.0 Adobe Acrobat DC 2017.12.20098 Adobe Acrobat DC 2017.12.20093 Adobe Acrobat DC 2017.9.20058 Adobe Acrobat DC 2017.9.20044 Adobe Acrobat DC 2015.6.30355 Adobe Acrobat DC 2015.6.30352 Adobe Acrobat DC 2015.6.30306 Adobe Acrobat DC 15.23.20070 Adobe Acrobat DC 15.23.20053 Adobe Acrobat DC 15.20.20042 Adobe Acrobat DC 15.20.20039 Adobe Acrobat DC 15.17.20053 Adobe Acrobat DC 15.17.20050 Adobe Acrobat DC 15.16.20045 Adobe Acrobat DC 15.16.20039 Adobe Acrobat DC 15.10.20060 Adobe Acrobat DC 15.10.20059 Adobe Acrobat DC 15.9.20077 Adobe Acrobat DC 15.6.30280 Adobe Acrobat DC 15.6.30279 Adobe Acrobat DC 15.6.30244 Adobe Acrobat DC 15.6.30243 Adobe Acrobat DC 15.6.30201 Adobe Acrobat DC 15.6.30198 Adobe Acrobat DC 15.6.30174 Adobe Acrobat DC 15.6.30172 Adobe Acrobat DC 15.6.30121 Adobe Acrobat DC 15.6.30097 Adobe Acrobat DC 2015.009.20069 Adobe Acrobat DC 2015.008.20082 Adobe Acrobat DC 2015.007.20033 Adobe Acrobat DC 2015.006.30094 Adobe Acrobat DC 2015.006.30060 Adobe Acrobat DC 2015.006.30033 Adobe Acrobat DC 15.010.20056 Adobe Acrobat DC 15.006.30119 Adobe Acrobat 2017.11.30066 Adobe Acrobat 11.0.22 Adobe Acrobat 11.0.21 Adobe Acrobat 11.0.20 Adobe Acrobat 11.0.19 Adobe Acrobat 11.0.18 Adobe Acrobat 11.0.17 Adobe Acrobat 11.0.16 Adobe Acrobat 11.0.11 Adobe Acrobat 11.0.7 Adobe Acrobat 11.0.6 Adobe Acrobat 11.0.6 Adobe Acrobat 11.0.4 Adobe Acrobat 11.0.2 Adobe Acrobat 11.0 Adobe Acrobat 11.0.9 Adobe Acrobat 11.0.7 Adobe Acrobat 11.0.3 Adobe Acrobat 11.0.15 Adobe Acrobat 11.0.14 Adobe Acrobat 11.0.13 Adobe Acrobat 11.0.12 Adobe Acrobat 11.0.10 Adobe Acrobat 11.0.1 Adobe Acrobat 11.0.09 Adobe Acrobat 11.0.08
Not Vulnerable:	Adobe Reader 11.0.23 Adobe Acrobat Reader DC 2018.9.20044 Adobe Acrobat Reader DC 2015.6.30392 Adobe Acrobat Reader 2017.11.30068 Adobe Acrobat DC 2018.9.20044 Adobe Acrobat DC 2015.6.30392 Adobe Acrobat 2017.11.30068 Adobe Acrobat 11.0.23

Adobe Reader and Acrobat Out-of-bounds Read Multiple Remote Code Execution Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Adobe Reader and Acrobat Out-of-bounds Read Multiple Remote Code Execution Vulnerabilities

References:

• Adobe Acrobat Home Page (Adobe)
  
• Adobe Homepage (Adobe)
  
• Adobe Reader Homepage (Adobe)
  
• APSB17-36:Security Updates Available for Adobe Acrobat and Reader | APSB17-36 (Adobe)