CVE-2017-11244

CVE-2017-11244 is a memory corruption vulnerability in Adobe Acrobat Reader, affecting versions 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier. The flaw resides in the image conversion engine when processing Enhanced Metafile Format (EMF) data, specifically related to pixel block transformations. Successful exploitation could lead to arbitrary code execution, posing a significant risk to affected systems. The vulnerability has a CVSS score of 6.5 (MEDIUM), indicating a network-based attack with low complexity, requiring user interaction (e.g., opening a malicious file) for successful exploitation, and leading to high confidentiality impact. While the EPSS score is relatively low, suggesting a lower probability of exploitation compared to many other CVEs, its FAUCET Risk Score of 71/100 highlights its potential severity. Currently, there is no evidence of active exploitation in the wild, and no public exploit code is available on platforms like Metasploit or ExploitDB. Community discussion and media coverage are minimal, with only one mention and one article identified, suggesting limited public awareness or active threat actor interest at the time of analysis.