CVE-2016-0945

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before…

published January 14, 2016

CVSS
—
EPSS
4%
Percentile
90.9
In the wild
Unconfirmed
What it is

⚠️ A subtle flaw in Adobe Reader could let attackers execute arbitrary code without breaking a sweat — a sneak attack right through your PDF files! 📄💥 Think of it as a sneaky waiter who, instead of taking your order right, just scribbles anything down on the ticket and hands it back to the kitchen. If the kitchen trusts the ticket without checking, they might serve a dish you didn’t want — or worse, a dish that’s harmful! An attacker could exploit this vulnerability to execute harmful code or cause a denial of service, leading to system crashes or unauthorized access to sensitive files. This could be absolutely devastating, especially if you're handling confidential documents.

Put simply

Think of it as a sneaky waiter who, instead of taking your order right, just scribbles anything down on the ticket and hands it back to the kitchen. If the kitchen trusts the ticket without checking, they might serve a dish you didn’t want — or worse, a dish that’s harmful! This vulnerability exists in Adobe Reader and Acrobat versions prior to specified updates, allowing memory corruption through unspecified vectors that can lead to arbitrary code execution.

What to do

An attacker could exploit this vulnerability to execute harmful code or cause a denial of service, leading to system crashes or unauthorized access to sensitive files. This could be absolutely devastating, especially if you're handling confidential documents. To protect yourself, update Adobe Reader and Acrobat to versions 11.0.14 or later, and for Adobe DC, ensure you’re on version 15.006.30119 or later. Regularly check for updates to keep your software secure! You've got this! With these updates, you'll be back in control and your PDFs will be safe. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04244 · 90.9th percentile
Published
2016-01-14T02:00Z
EPSS history
Timeline
  • 14 JAN 02:00Z
    Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before…
    cvelistv5