CVE-2017-2949

No fix known EPSS 20%

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability in the XSLT engine. Successful exploitation could lead to arbitrary code execution.

Published 2017-01-11 · CVE record · OSV

Products: adobe acrobat, adobe acrobat_dc, adobe acrobat_reader_dc, adobe reader