
A successful attack can lead to sensitive data exposure. The most recent Classic release was Acrobat 2017, which costs US300-450 to purchase upfront. Its the complete desktop solution for working with PDF documents. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. Adobe Acrobat 2017 is the latest perpetual version of Acrobat.


This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer the computation is part of an image conversion, specifically in Enhanced Metafile Format Plus (EMF +) processing modules. Adobe Acrobat Pro 2017 is a program for creating and modifying PDF documents released by Adobe Systems in 2017. An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions.
