CERTFR-2017-AVI-254
Vulnerability from certfr_avis - Published: 2017-08-09 - Updated: 2017-08-09
De multiples vulnérabilités ont été corrigées dans Adobe Reader et Acrobat. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et une atteinte à la confidentialité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | Acrobat | Adobe Acrobat DC versions antérieures à 2017.012.20093 sur Windows et Macintosh | ||
| Adobe | Acrobat | Adobe Acrobat XI versions antérieures à 11.0.21 sur Windows et Macintosh | ||
| Adobe | Acrobat | Adobe Acrobat 2017 versions antérieures à 2017.011.30059 sur Windows et Macintosh | ||
| Adobe | Acrobat | Adobe Acrobat DC versions antérieures à 2015.006.30352 sur Windows et Macintosh | ||
| Adobe | Acrobat | Adobe Acrobat Reader DC versions antérieures à 2015.006.30352 sur Windows et Macintosh | ||
| Adobe | Acrobat | Adobe Acrobat Reader 2017 versions antérieures à 2017.011.30059 sur Windows et Macintosh | ||
| Adobe | Acrobat | Adobe Acrobat Reader DC versions antérieures à 2017.012.20093 sur Windows et Macintosh | ||
| Adobe | Acrobat | Adobe Reader XI versions antérieures à 11.0.21 sur Windows et Macintosh |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Adobe Acrobat DC versions ant\u00e9rieures \u00e0 2017.012.20093 sur Windows et Macintosh",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Acrobat XI versions ant\u00e9rieures \u00e0 11.0.21 sur Windows et Macintosh",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Acrobat 2017 versions ant\u00e9rieures \u00e0 2017.011.30059 sur Windows et Macintosh",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Acrobat DC versions ant\u00e9rieures \u00e0 2015.006.30352 sur Windows et Macintosh",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Acrobat Reader DC versions ant\u00e9rieures \u00e0 2015.006.30352 sur Windows et Macintosh",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Acrobat Reader 2017 versions ant\u00e9rieures \u00e0 2017.011.30059 sur Windows et Macintosh",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Acrobat Reader DC versions ant\u00e9rieures \u00e0 2017.012.20093 sur Windows et Macintosh",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Reader XI versions ant\u00e9rieures \u00e0 11.0.21 sur Windows et Macintosh",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2017-11241",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11241"
},
{
"name": "CVE-2017-11246",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11246"
},
{
"name": "CVE-2017-11236",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11236"
},
{
"name": "CVE-2017-11222",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11222"
},
{
"name": "CVE-2017-3117",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3117"
},
{
"name": "CVE-2017-3016",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3016"
},
{
"name": "CVE-2017-11258",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11258"
},
{
"name": "CVE-2017-11271",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11271"
},
{
"name": "CVE-2017-11214",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11214"
},
{
"name": "CVE-2017-11210",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11210"
},
{
"name": "CVE-2017-11224",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11224"
},
{
"name": "CVE-2017-11212",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11212"
},
{
"name": "CVE-2017-11244",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11244"
},
{
"name": "CVE-2017-11265",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11265"
},
{
"name": "CVE-2017-3115",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3115"
},
{
"name": "CVE-2017-11263",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11263"
},
{
"name": "CVE-2017-11229",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11229"
},
{
"name": "CVE-2017-11235",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11235"
},
{
"name": "CVE-2017-11230",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11230"
},
{
"name": "CVE-2017-11259",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11259"
},
{
"name": "CVE-2017-11267",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11267"
},
{
"name": "CVE-2017-3119",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3119"
},
{
"name": "CVE-2017-11261",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11261"
},
{
"name": "CVE-2017-11234",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11234"
},
{
"name": "CVE-2017-11257",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11257"
},
{
"name": "CVE-2017-3122",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3122"
},
{
"name": "CVE-2017-11239",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11239"
},
{
"name": "CVE-2017-11226",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11226"
},
{
"name": "CVE-2017-3120",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3120"
},
{
"name": "CVE-2017-11243",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11243"
},
{
"name": "CVE-2017-11228",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11228"
},
{
"name": "CVE-2017-11232",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11232"
},
{
"name": "CVE-2017-3121",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3121"
},
{
"name": "CVE-2017-11227",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11227"
},
{
"name": "CVE-2017-11248",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11248"
},
{
"name": "CVE-2017-11252",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11252"
},
{
"name": "CVE-2017-3113",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3113"
},
{
"name": "CVE-2017-11249",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11249"
},
{
"name": "CVE-2017-11270",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11270"
},
{
"name": "CVE-2017-3123",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3123"
},
{
"name": "CVE-2017-11245",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11245"
},
{
"name": "CVE-2017-11237",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11237"
},
{
"name": "CVE-2017-3038",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3038"
},
{
"name": "CVE-2017-11219",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11219"
},
{
"name": "CVE-2017-11238",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11238"
},
{
"name": "CVE-2017-3124",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3124"
},
{
"name": "CVE-2017-3118",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3118"
},
{
"name": "CVE-2017-11233",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11233"
},
{
"name": "CVE-2017-11242",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11242"
},
{
"name": "CVE-2017-11218",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11218"
},
{
"name": "CVE-2017-11220",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11220"
},
{
"name": "CVE-2017-11231",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11231"
},
{
"name": "CVE-2017-3116",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3116"
},
{
"name": "CVE-2017-11223",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11223"
},
{
"name": "CVE-2017-11262",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11262"
},
{
"name": "CVE-2017-11251",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11251"
},
{
"name": "CVE-2017-11255",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11255"
},
{
"name": "CVE-2017-11260",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11260"
},
{
"name": "CVE-2017-11254",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11254"
},
{
"name": "CVE-2017-11268",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11268"
},
{
"name": "CVE-2017-11216",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11216"
},
{
"name": "CVE-2017-11269",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11269"
},
{
"name": "CVE-2017-11256",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11256"
},
{
"name": "CVE-2017-11209",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11209"
},
{
"name": "CVE-2017-11221",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11221"
},
{
"name": "CVE-2017-11211",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11211"
},
{
"name": "CVE-2017-11217",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11217"
}
],
"initial_release_date": "2017-08-09T00:00:00",
"last_revision_date": "2017-08-09T00:00:00",
"links": [],
"reference": "CERTFR-2017-AVI-254",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2017-08-09T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eAdobe Reader et Acrobat\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance et\nune atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Adobe Reader et Acrobat",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe apsb17-24 du 08 ao\u00fbt 2017",
"url": "https://helpx.adobe.com/security/products/acrobat/apsb17-24.html"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…