Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable integer overflow vulnerability in the XML Forms Architecture (XFA) engine, related to layout functionality. Successful exploitation could lead to arbitrary code execution.
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Acrobat | Adobe | * | 11.0.19 (including) |
| Acrobat_dc | Adobe | * | 15.006.30280 (including) |
| Acrobat_dc | Adobe | * | 15.023.20070 (including) |
| Acrobat_reader_dc | Adobe | * | 15.006.30280 (including) |
| Acrobat_reader_dc | Adobe | * | 15.023.20070 (including) |
| Reader | Adobe | * | 11.0.19 (including) |