CVE-2016-0940

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat…

published January 14, 2016

CVSS
—
EPSS
5%
Percentile
92.7
In the wild
Unconfirmed
What it is

⚠️ A crafty use-after-free bug in Adobe Reader could let attackers execute arbitrary code, like a magician pulling a rabbit out of a hat in an unexpected moment! 🎩✨ Think of this vulnerability as a restaurant that forgets to check if a table has been cleared before seating another customer. If the old reservation isn’t properly ‘freed’ up, that new guest might find themselves face-to-face with leftover dishes — or worse! An attacker could potentially take control of the affected system, steal sensitive information, or drop malware without the user even realizing anything is wrong. It's a surprising twist in the plot that could have devastating consequences for your data security! 🔥

Put simply

Think of this vulnerability as a restaurant that forgets to check if a table has been cleared before seating another customer. If the old reservation isn’t properly ‘freed’ up, that new guest might find themselves face-to-face with leftover dishes — or worse! This use-after-free vulnerability allows attackers to exploit memory management issues in Adobe Reader and Acrobat, leading to arbitrary code execution. It specifically affects versions prior to 11.0.14 for Adobe Reader and Acrobat, and earlier versions for the DC Classic and Continuous editions.

What to do

An attacker could potentially take control of the affected system, steal sensitive information, or drop malware without the user even realizing anything is wrong. It's a surprising twist in the plot that could have devastating consequences for your data security! 🔥 To protect yourself, immediately update Adobe Reader and Acrobat to the latest versions: 11.0.14 or above, and 15.006.30119 or above for DC Classic, or 15.010.20056 or above for DC Continuous. Regularly check for updates to stay ahead of potential threats! 🛡️ You've got this! Follow these steps and you'll be one step closer to a secure environment! 💪🎉

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05493 · 92.7th percentile
Published
2016-01-14T02:00Z
EPSS history
Timeline
  • 14 JAN 02:00Z
    Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat…
    cvelistv5