vciy

Adobe Acrobat Reader: 34 records in one advisory

34 records announced together, published between 2017-01-11 and 2017-03-31, every one of them citing the same advisory.

The advisory

Every record in this batch cites https://helpx.adobe.com/security/products/acrobat/apsb17-01.html. That is the CNA's own reference, held in the index, and it is why these records are on one page.

What the records offer

No record in this batch publishes a fixed version in held sources.

No record in this batch is listed by CISA in held sources.

17 of 34 records name something of its own. For the other 17, held sources say the same thing about each.

Most commonly mapped weakness across the batch: Memory Corruption.

What this page does not cover

Every record citing this advisory is on this page.

The batch is what one advisory announced. It is not every record sharing this weakness, this product or this mechanism, and nothing here is scoped to any estate.

Listed for shared announcement, not shared vulnerability. Each record here is its own finding with its own page, and fixing one does not address another.

CVE-2017-2939cross-reference tableMemory Corruption
CVE-2017-2940no title heldMemory Corruption
CVE-2017-2941compact fontMemory Corruption
CVE-2017-2942no title heldHeap Overflow
CVE-2017-2943no title heldMemory Corruption
CVE-2017-2944craftedMemory Corruption
CVE-2017-2945no title heldHeap Overflow
CVE-2017-2946segment for storing non-graphicHeap Overflow
CVE-2017-2947security bypass manipulating formSecurity Bypass
CVE-2017-2948no title heldBuffer Overflow / Underflow
CVE-2017-2949no title heldHeap Overflow
CVE-2017-2950layoutUse After Free
CVE-2017-2951sub-formUse After Free
CVE-2017-2952no title heldBuffer Overflow / Underflow
CVE-2017-2953no title heldMemory Corruption
CVE-2017-2954no title heldMemory Corruption
CVE-2017-2955no title heldUse After Free
CVE-2017-2956navigation paneUse After Free
CVE-2017-2957collaborationUse After Free
CVE-2017-2958no title heldUse After Free
CVE-2017-2959no title heldHeap Overflow
CVE-2017-2960no title heldMemory Corruption
CVE-2017-2961validationUse After Free
CVE-2017-2962type confusion localizationType Confusion
CVE-2017-2963no title heldMemory Corruption
CVE-2017-2964no title heldMemory Corruption
CVE-2017-2965no title heldMemory Corruption
CVE-2017-2966segmentsHeap Overflow
CVE-2017-2967form's structure organizationMemory Corruption
CVE-2017-2970templateHeap Overflow
CVE-2017-2971decoder routineHeap Overflow
CVE-2017-2972no title heldMemory Corruption
CVE-2017-3009jpeg2000 parser disclosureBuffer Overflow
CVE-2017-3010renderingMemory Corruption

34 records, read from the index as it stood on 2026-09-20. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.