{ "schema_version": "1.4.0", "id": "GHSA-7c3v-793j-crwq", "modified": "2022-05-17T03:04:07Z", "published": "2022-05-17T03:04:07Z", "aliases": [ "CVE-2017-2949" ], "details": "Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability in the XSLT engine. Successful exploitation could lead to arbitrary code execution.", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-2949" }, { "type": "WEB", "url": "https://helpx.adobe.com/security/products/acrobat/apsb17-01.html" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/95344" }, { "type": "WEB", "url": "http://www.securitytracker.com/id/1037574" }, { "type": "WEB", "url": "http://www.zerodayinitiative.com/advisories/ZDI-17-005" }, { "type": "WEB", "url": "http://www.zerodayinitiative.com/advisories/ZDI-17-006" }, { "type": "WEB", "url": "http://www.zerodayinitiative.com/advisories/ZDI-17-007" }, { "type": "WEB", "url": "http://www.zerodayinitiative.com/advisories/ZDI-17-008" }, { "type": "WEB", "url": "http://www.zerodayinitiative.com/advisories/ZDI-17-009" }, { "type": "WEB", "url": "http://www.zerodayinitiative.com/advisories/ZDI-17-011" }, { "type": "WEB", "url": "http://www.zerodayinitiative.com/advisories/ZDI-17-012" }, { "type": "WEB", "url": "http://www.zerodayinitiative.com/advisories/ZDI-17-013" }, { "type": "WEB", "url": "http://www.zerodayinitiative.com/advisories/ZDI-17-015" }, { "type": "WEB", "url": "http://www.zerodayinitiative.com/advisories/ZDI-17-016" }, { "type": "WEB", "url": "http://www.zerodayinitiative.com/advisories/ZDI-17-017" }, { "type": "WEB", "url": "http://www.zerodayinitiative.com/advisories/ZDI-17-018" }, { "type": "WEB", "url": "http://www.zerodayinitiative.com/advisories/ZDI-17-019" }, { "type": "WEB", "url": "http://www.zerodayinitiative.com/advisories/ZDI-17-020" }, { "type": "WEB", "url": "http://www.zerodayinitiative.com/advisories/ZDI-17-028" }, { "type": "WEB", "url": "http://www.zerodayinitiative.com/advisories/ZDI-17-029" } ], "database_specific": { "cwe_ids": [ "CWE-119" ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2017-01-11T04:59:00Z" } }