CVE-2015-6683

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before…

published October 14, 2015

CVSS
—
EPSS
7%
Percentile
94.0
In the wild
Unconfirmed
What it is

🚨 A use-after-free vulnerability in Adobe Reader and Acrobat could let an attacker run arbitrary code — think of it like losing control of your car after forgetting to check the brakes! This flaw is like a car that keeps running even after the driver has exited. Just like having a faulty ignition could let the vehicle zoom off unpredictably, this vulnerability allows malicious actors to execute code without the user's consent, leading to chaos! If exploited, an attacker could gain control of the system, potentially accessing sensitive documents or installing malicious software—it's like handing the keys to your house over to a stranger! While this vulnerability hasn't been widely exploited, the possibility for harm is still very real, even if the severity isn't screaming critical.

Put simply

This flaw is like a car that keeps running even after the driver has exited. Just like having a faulty ignition could let the vehicle zoom off unpredictably, this vulnerability allows malicious actors to execute code without the user's consent, leading to chaos! This use-after-free vulnerability occurs in Adobe Reader and Acrobat versions prior to 10.1.16 and 11.0.13, allowing attackers to execute arbitrary code through unspecified vectors, essentially mismanaging memory use and leading to unexpected behavior.

What to do

If exploited, an attacker could gain control of the system, potentially accessing sensitive documents or installing malicious software—it's like handing the keys to your house over to a stranger! While this vulnerability hasn't been widely exploited, the possibility for harm is still very real, even if the severity isn't screaming critical. Update Adobe Reader and Acrobat to the latest versions: 10.1.16 or 11.0.13 for older versions, and for DC Classic and Continuous, ensure they're on versions after 2015.006.30094 and 2015.009.20069 respectively. Don't leave your software vulnerable! You've got this! Keep your software up-to-date and stay one step ahead of potential threats. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06908 · 94.0th percentile
Published
2015-10-14T23:00Z
EPSS history
Timeline
  • 14 OCT 23:00Z
    Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before…
    cvelistv5