CVE-2016-1041

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before…

published May 11, 2016

CVSS
—
EPSS
6%
Percentile
93.6
In the wild
Unconfirmed
What it is

⚠️ A crafty bypass lets attackers bypass JavaScript restrictions in Adobe Reader and Acrobat — it's like an unauthorized guest sneaking past security at an event! 🎭 Imagine a party where guests are supposed to show ID at the door. Instead, an uninvited guest slips in unnoticed, mingling and accessing areas they shouldn’t. That’s what this vulnerability does, allowing unauthorized JavaScript API execution. An attacker could exploit this vulnerability to run malicious JavaScript code, potentially accessing sensitive data or disrupting operations within Adobe applications. It’s a sneaky way to gain unauthorized capabilities that could lead to data breaches or other malicious actions.

Put simply

Imagine a party where guests are supposed to show ID at the door. Instead, an uninvited guest slips in unnoticed, mingling and accessing areas they shouldn’t. That’s what this vulnerability does, allowing unauthorized JavaScript API execution. This vulnerability allows attackers to circumvent JavaScript API execution restrictions in Adobe Reader and Acrobat versions prior to the specified patches, enabling them to execute arbitrary JavaScript.

What to do

An attacker could exploit this vulnerability to run malicious JavaScript code, potentially accessing sensitive data or disrupting operations within Adobe applications. It’s a sneaky way to gain unauthorized capabilities that could lead to data breaches or other malicious actions. Update Adobe Reader and Acrobat to versions 11.0.16 and 15.006.30172 or later. Make sure to regularly check for updates to ensure you're protected against these types of vulnerabilities. Don’t forget to educate users about safe document handling! You’ve got this! Stay proactive and keep your software updated — security hero status: activated! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06293 · 93.6th percentile
Published
2016-05-11T10:00Z
EPSS history
Timeline
  • 11 MAY 10:00Z
    Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before…
    cvelistv5