Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.8

Adobe Acrobat Reader can bypass security via form data

CVE-2017-11229 · published 9 years ago
Summary

Certain versions of Adobe Acrobat Reader and Acrobat DC may let attackers skip security checks when they work with form files. This could let malicious code run on a computer that opens a crafted form. Upgrade to the latest Adobe Reader/Acrobat version as soon as possible to close the gap.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
adobe acrobat >= 11.0.0, <= 11.0.20
>= 17.011.00000, <= 17.011.30066
cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*
adobe acrobat_dc >= 15.006.30060, <= 15.006.30306
>= 15.007.20033, <= 17.009.20058
cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*
adobe acrobat_reader >= 17.011.00000, <= 17.011.30066
cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*
adobe acrobat_reader_dc >= 15.006.30060, <= 15.006.30306
>= 15.007.20033, <= 17.009.20058
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*
adobe reader >= 11.0.0, <= 11.0.20
cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*
Original advisory text
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has a security bypass vulnerability when manipulating Forms Data For...
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has a security bypass vulnerability when manipulating Forms Data Format (FDF).
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
8.8 High
Exploitation
7% chance of attack within 30 days
Timeline
Published11 Aug 2017
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2017-11229 · NVD
Track software like this
Free during beta