CVE Vulnerabilities

CVE-2017-16419

Uncontrolled Recursion

Published: Dec 09, 2017 | Modified: Oct 03, 2019
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The issue is a stack exhaustion problem within the JavaScript API, where the computation does not correctly control the amount of recursion that can happen with respect to system resources.

Weakness

The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.

Affected Software

Name Vendor Start Version End Version
Acrobat Adobe * 11.0.22 (including)
Acrobat Adobe 17.0 (including) 17.011.30066 (including)
Acrobat_dc Adobe - (including) 17.012.20098 (including)
Acrobat_dc Adobe 15.0 (including) 15.006.30355 (including)
Acrobat_reader Adobe * 11.0.22 (including)
Acrobat_reader Adobe 17.0 (including) 17.011.30066 (including)
Acrobat_reader_dc Adobe - (including) 17.012.20098 (including)
Acrobat_reader_dc Adobe 15.0 (including) 15.006.30355 (including)

Potential Mitigations

References