VULNERABILITY INTELLIGENCE

CVE-2017-3034

CVSS score7.8 HIGH
EPSS probability5.21%
CISA KEVNot currently listed
Published2017-04-12
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable integer overflow vulnerability in the XML Forms Architecture (XFA) engine, related to layout functionality. Successful exploitation could lead to arbitrary code execution.

Weakness classification

  • CWE-191: Integer Underflow (Wrap or Wraparound)

Primary references