CVE-2016-1047

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat…

published May 11, 2016

CVSS
—
EPSS
6%
Percentile
93.6
In the wild
Unconfirmed
What it is

⚠️ A sneaky use-after-free vulnerability lurks in Adobe Reader and Acrobat that lets attackers execute arbitrary code — like a waiter serving your meal before you've even ordered! Think of it as a restaurant where a waiter serves a dish that’s still being prepared, allowing anyone in the kitchen to add their own ingredients without anyone noticing. This vulnerability means an attacker can sneak in their own code, uninvited! If exploited, this vulnerability could allow attackers to run malicious code on your system, potentially compromising sensitive data or even taking complete control. That means they could access your files, install malware, or manipulate your system in ways you'd never expect!

Put simply

Think of it as a restaurant where a waiter serves a dish that’s still being prepared, allowing anyone in the kitchen to add their own ingredients without anyone noticing. This vulnerability means an attacker can sneak in their own code, uninvited! This use-after-free vulnerability in Adobe Reader and Acrobat allows an attacker to execute arbitrary code via unspecified vectors. This means the application fails to properly manage memory, creating an opportunity for unauthorized actions.

What to do

If exploited, this vulnerability could allow attackers to run malicious code on your system, potentially compromising sensitive data or even taking complete control. That means they could access your files, install malware, or manipulate your system in ways you'd never expect! To protect yourself, immediately upgrade Adobe Reader and Acrobat to version 11.0.16 or later for older versions, and ensure Acrobat DC is updated to at least 15.016.20039. Regularly check for updates to stay secure! You've got this! Follow these steps, and you'll keep your system safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06386 · 93.6th percentile
Published
2016-05-11T10:00Z
EPSS history
Timeline
  • 11 MAY 10:00Z
    Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat…
    cvelistv5