CVE-2016-0933

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before…

published January 14, 2016

CVSS
—
EPSS
6%
Percentile
93.4
In the wild
Unconfirmed
What it is

⚠️ A sneaky vulnerability in Adobe Reader and Acrobat lets attackers execute arbitrary code — like an uninvited guest crashing a party! 🎉 Imagine a scenario where a waiter at a fancy restaurant doesn't check your reservation and throws open the doors to anyone claiming to have a table. This vulnerability allows an attacker to exploit Adobe's software similarly, inviting chaos by executing malicious code without proper checks. If exploited, this flaw could lead to arbitrary code execution or a denial of service. An attacker could gain the ability to manipulate your documents, potentially leading to data breaches or system crashes. That's like giving someone the keys to your office while you're out for lunch!

Put simply

Imagine a scenario where a waiter at a fancy restaurant doesn't check your reservation and throws open the doors to anyone claiming to have a table. This vulnerability allows an attacker to exploit Adobe's software similarly, inviting chaos by executing malicious code without proper checks. The vulnerability exists due to memory corruption in Adobe Reader and Acrobat prior to specified versions, allowing attackers to potentially run malicious code. This can happen through unspecified vectors that bypass security mechanisms.

What to do

If exploited, this flaw could lead to arbitrary code execution or a denial of service. An attacker could gain the ability to manipulate your documents, potentially leading to data breaches or system crashes. That's like giving someone the keys to your office while you're out for lunch! To protect yourself, ensure you update Adobe Reader and Acrobat to version 11.0.14 or later, or 15.006.30119 and higher. Regularly check for updates and consider enabling automatic updates for added security. 🛡️ You've got this! Stay vigilant and keep your software up to date for peace of mind! 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06158 · 93.4th percentile
Published
2016-01-14T02:00Z
EPSS history
Timeline
  • 14 JAN 02:00Z
    Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before…
    cvelistv5