Oval Definition:oval:org.cisecurity:def:1736
Revision Date:2017-02-24Version:7
Title:Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable buffer overflow / underflow vulnerability - CVE-2017-2952
Description:Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable buffer overflow / underflow vulnerability in the image conversion module related to parsing tags in TIFF files. Successful exploitation could lead to arbitrary code execution.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2017-2952
Platform(s):Microsoft Windows 10
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2016
Microsoft Windows Vista
Product(s):Adobe Acrobat
Adobe Acrobat DC Classic
Adobe Acrobat DC Continuous
Adobe Reader
Adobe Reader DC Classic
Adobe Reader DC Continuous
Definition Synopsis
  • Adobe Acrobat 11 is installed + version
  • Adobe Acrobat 11.x is installed
  • AND Check if Adobe Acrobat 11 version is less than 11.0.19
  • OR Adobe Acrobat DC Classic is installed + version
  • Adobe Acrobat DC Classic is installed
  • AND Check if Adobe Acrobat DC Classic version is less than 15.006.30279
  • OR Adobe Acrobat DC Continuous is installed + version
  • Adobe Acrobat DC Continuous is installed
  • AND Check if Adobe Acrobat DC Continuous version is less than 15.023.20053
  • OR Adobe Reader 11 is installed + version
  • Adobe Reader 11.x is installed
  • AND Check if Adobe Reader 11 version is less than 11.0.19
  • OR Adobe Reader DC Classic is installed + version
  • Adobe Reader DC Classic is installed
  • AND Check if Adobe Reader DC Classic version is less than 15.006.30279
  • OR Adobe Reader DC Continuous is installed + version
  • Adobe Reader DC Continuous is installed
  • AND Check if Adobe Reader DC Continuous version is less than 15.023.20053
  • BACK