CVE-2016-1040

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before…

published May 11, 2016

CVSS
—
EPSS
6%
Percentile
92.9
In the wild
Unconfirmed
What it is

⚠️ A rather sneaky gap in Adobe Reader's armor lets attackers bypass JavaScript execution restrictions. 🔥 Think of it like a restaurant that allows chefs to cook their own dishes, but forgot to check their credentials – anyone could walk in with a recipe for disaster! 🍽️ An attacker could potentially execute any JavaScript code they want within an Adobe document, leading to unauthorized access and manipulation of sensitive data. This could mean anything from stealing information to running malicious scripts that wreak havoc on your system!

Put simply

Think of it like a restaurant that allows chefs to cook their own dishes, but forgot to check their credentials – anyone could walk in with a recipe for disaster! 🍽️ This vulnerability in Adobe Reader and Acrobat allows attackers to bypass security restrictions meant to prevent unauthorized JavaScript execution, potentially compromising user systems.

What to do

An attacker could potentially execute any JavaScript code they want within an Adobe document, leading to unauthorized access and manipulation of sensitive data. This could mean anything from stealing information to running malicious scripts that wreak havoc on your system! It's crucial to update Adobe Reader and Acrobat to the latest versions: 11.0.16, 15.006.30172, or 15.016.20039 and make sure to enable all security features. Regularly check for and apply updates to maintain a secure environment. You've got this! One quick update and you'll be back to hero status, keeping your documents safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05708 · 92.9th percentile
Published
2016-05-11T10:00Z
EPSS history
Timeline
  • 11 MAY 10:00Z
    Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before…
    cvelistv5