CVE-2017-11227 is a critical memory corruption vulnerability affecting Adobe Acrobat Reader versions 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier. This flaw resides in the image conversion engine when processing Enhanced Metafile Format (EMF) private data. Successful exploitation could lead to arbitrary code execution, posing a significant risk to affected systems. The vulnerability carries a CVSS v3 score of 8.8 (High), indicating a severe threat. It can be exploited remotely over the network with low attack complexity, requiring user interaction (e.g., opening a malicious file). The potential impact includes high confidentiality, integrity, and availability compromise. While the vulnerability is severe, there is no evidence of active exploitation (not in KEV). There are no publicly available exploit modules for Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are limited, with only one mention in each category, suggesting relatively low public awareness despite its high severity.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 11.0.0, <= 11.0.20CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:* | ||
>= 17.011.00000, <= 17.011.30066CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:* | ||
>= 15.006.30060, <= 15.006.30306CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:* | ||
>= 15.007.20033, <= 17.009.20058CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:* | ||
>= 17.011.00000, <= 17.011.30066CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.