CVE-2016-1037

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before…

published May 11, 2016

CVSS
—
EPSS
4%
Percentile
89.7
In the wild
Unconfirmed
What it is

🚨 A potentially destructive memory corruption bug lurks in older versions of Adobe Reader and Acrobat! This could pave the way for attackers to execute arbitrary code without breaking a sweat. ⚡ Think of it like a fancy restaurant accepting any (and all) unverified orders from patrons. If the kitchen never checks the order forms, a mischievous diner could ask for something outrageous, leading to chaos in the kitchen! An attacker could exploit this vulnerability to run malicious code on your system, leading to significant data breaches or even a complete denial of service. It's like giving someone access to your personal vault without a lock—utterly terrifying!

Put simply

Think of it like a fancy restaurant accepting any (and all) unverified orders from patrons. If the kitchen never checks the order forms, a mischievous diner could ask for something outrageous, leading to chaos in the kitchen! This vulnerability allows attackers to execute arbitrary code or cause a denial of service due to memory corruption in Adobe Reader and Acrobat, specifically in versions earlier than 11.0.16 and various versions of Acrobat DC. The exact exploit methods remain unspecified, making it a sneaky threat.

What to do

An attacker could exploit this vulnerability to run malicious code on your system, leading to significant data breaches or even a complete denial of service. It's like giving someone access to your personal vault without a lock—utterly terrifying! Upgrade your Adobe Reader and Acrobat to version 11.0.16 or higher, or if you're on Acrobat DC, ensure you’re running version 15.006.30172 or later. Regularly check for updates to keep your software secure! You've got this! With a few simple upgrades, you can lock down your Adobe software and become a security hero! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03737 · 89.7th percentile
Published
2016-05-11T10:00Z
EPSS history
Timeline
  • 11 MAY 10:00Z
    Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before…
    cvelistv5