CVE-2017-3009

7.5 highEPSS 4.4%

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable buffer overflow vulnerability in the JPEG2000 parser. Successful exploitation could lead to information disclosure.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 4.4% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-125
Published: 2017-03-31
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adobe:acrobat
adobe:acrobat_dc
adobe:acrobat_reader_dc
adobe:reader

References

http://www.securityfocus.com/bid/97302
https://helpx.adobe.com/security/products/acrobat/apsb17-01.html
http://www.securityfocus.com/bid/97302
https://helpx.adobe.com/security/products/acrobat/apsb17-01.html

Check your stack JSON