CVE-2016-1065

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat…

published May 11, 2016

CVSS
—
EPSS
6%
Percentile
93.6
In the wild
Unconfirmed
What it is

⚠️ A pesky use-after-free vulnerability in Adobe Reader could let attackers run arbitrary code, like an uninvited guest slipping into a party because no one checked the guest list! Think of it like a restaurant that forgets to clean up a table after the last diners leave. The next unsuspecting patrons might find their table set for a meal they didn't order, leading to a startling surprise instead of a pleasant dining experience! If exploited, this vulnerability can allow attackers to take control of your system, potentially leading to data theft, malware installation, or even complete system compromise. It’s like letting a stranger waltz into your home with a key you never intended to give them!

Put simply

Think of it like a restaurant that forgets to clean up a table after the last diners leave. The next unsuspecting patrons might find their table set for a meal they didn't order, leading to a startling surprise instead of a pleasant dining experience! This use-after-free vulnerability allows an attacker to execute arbitrary code by improperly handling memory allocation, which can occur through unspecified vectors in older versions of Adobe Reader and Acrobat.

What to do

If exploited, this vulnerability can allow attackers to take control of your system, potentially leading to data theft, malware installation, or even complete system compromise. It’s like letting a stranger waltz into your home with a key you never intended to give them! Update your Adobe Reader or Acrobat to version 11.0.16 or higher, or for the DC Classic version, ensure it's updated to 15.006.30172 or higher. For the Continuous version, patch to 15.016.20039 or newer. Don't delay—this is a crucial step in keeping your systems secure! You've got this! Just follow these steps to lock it down, and you'll be a security hero in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06410 · 93.6th percentile
Published
2016-05-11T10:00Z
EPSS history
Timeline
  • 11 MAY 10:00Z
    Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat…
    cvelistv5