CVE Vulnerabilities

CVE-2017-16419

Uncontrolled Recursion

Published: Dec 09, 2017 | Modified: Apr 20, 2025
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The issue is a stack exhaustion problem within the JavaScript API, where the computation does not correctly control the amount of recursion that can happen with respect to system resources.

Weakness

The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.

Affected Software

NameVendorStart VersionEnd Version
AcrobatAdobe*11.0.22 (including)
AcrobatAdobe17.0 (including)17.011.30066 (including)
Acrobat_dcAdobe- (including)17.012.20098 (including)
Acrobat_dcAdobe15.0 (including)15.006.30355 (including)
Acrobat_readerAdobe*11.0.22 (including)
Acrobat_readerAdobe17.0 (including)17.011.30066 (including)
Acrobat_reader_dcAdobe- (including)17.012.20098 (including)
Acrobat_reader_dcAdobe15.0 (including)15.006.30355 (including)

Potential Mitigations

References