Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2017-16380
PUBLISHED
More InfoOfficial Page
Assigner-adobe
Assigner Org ID-078d4453-3bcd-4900-85e6-15281da43538
View Known Exploited Vulnerability (KEV) details
Published At-09 Dec, 2017 | 06:00
Updated At-05 Aug, 2024 | 20:27
Rejected At-
▼CVE Numbering Authority (CNA)

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a security bypass vulnerability for a certain file-type extension. Acrobat maintains both a blacklist and whitelist (the user can specify an allowed attachment). However, any file extensions that are neither on the blacklist nor the whitelist can still be opened after displaying a warning prompt.

Affected Products
Vendor
n/a
Product
Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions
Versions
Affected
  • Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions
Problem Types
TypeCWE IDDescription
textN/ASecurity Bypass
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
http://www.securitytracker.com/id/1039791
vdb-entry
x_refsource_SECTRACK
http://www.securityfocus.com/bid/101814
vdb-entry
x_refsource_BID
https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
x_refsource_CONFIRM
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
http://www.securitytracker.com/id/1039791
vdb-entry
x_refsource_SECTRACK
x_transferred
http://www.securityfocus.com/bid/101814
vdb-entry
x_refsource_BID
x_transferred
https://helpx.adobe.com/security/products/acrobat/apsb17-36.html
x_refsource_CONFIRM
x_transferred
Details not found