CVE-2016-1038

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before…

published May 11, 2016

CVSS
—
EPSS
7%
Percentile
94.1
In the wild
Unconfirmed
What it is

⚠️ A sneaky loophole lets scripts run wild! Adobe Reader and Acrobat before certain versions let attackers bypass JavaScript API restrictions, opening the door to mischief. 🔥 Think of it like a restaurant where the chef ignores the allergen warnings on the orders — dangerous substitutions can slip in unnoticed. This vulnerability allows scripts to execute without proper checks, like ingredients thrown into a dish without any supervision. An attacker could exploit this vulnerability to execute malicious scripts within the context of a trusted document. This means they might access sensitive data or perform unauthorized actions, compromising your system's security and privacy.

Put simply

Think of it like a restaurant where the chef ignores the allergen warnings on the orders — dangerous substitutions can slip in unnoticed. This vulnerability allows scripts to execute without proper checks, like ingredients thrown into a dish without any supervision. This vulnerability allows attackers to bypass JavaScript API execution restrictions, enabling the execution of untrusted scripts in Adobe Reader and Acrobat on affected versions. This could lead to unintended consequences due to a lack of necessary verification before executing these scripts.

What to do

An attacker could exploit this vulnerability to execute malicious scripts within the context of a trusted document. This means they might access sensitive data or perform unauthorized actions, compromising your system's security and privacy. To protect yourself, upgrade Adobe Reader and Acrobat to versions 11.0.16, 15.006.30172, or 15.016.20039 or later. Regularly check for updates and ensure your applications are running the latest versions to keep your defenses strong. You've got this! Stay proactive and secure your setup with those updates! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06970 · 94.1th percentile
Published
2016-05-11T10:00Z
EPSS history
Timeline
  • 11 MAY 10:00Z
    Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before…
    cvelistv5