CVE-2016-1068

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat…

published May 11, 2016

CVSS
—
EPSS
6%
Percentile
93.6
In the wild
Unconfirmed
What it is

⚠️ A sneaky little vulnerability lurks in Adobe Reader and Acrobat, allowing attackers to execute arbitrary code through an unexpected use-after-free! 🔥 Think of it like a chef who accidentally leaves out an ingredient from a recipe — the dish might get made, but it could end up tasting completely different, or worse, be completely inedible! In this case, attackers can exploit this coding oversight to insert their malicious instructions instead of the intended content. If exploited, this vulnerability could allow attackers to take control of your system, leading to devastating consequences like data theft, unauthorized access, or even malware installation! Imagine an intruder slipping in unnoticed while you're busy browsing through documents — totally unsettling!

Put simply

Think of it like a chef who accidentally leaves out an ingredient from a recipe — the dish might get made, but it could end up tasting completely different, or worse, be completely inedible! In this case, attackers can exploit this coding oversight to insert their malicious instructions instead of the intended content. This use-after-free vulnerability occurs when memory is freed but still referenced, enabling attackers to execute arbitrary code through unspecified vectors in the affected versions of Reader and Acrobat. This affects versions before 11.0.16 and DC Classic before 15.006.30172.

What to do

If exploited, this vulnerability could allow attackers to take control of your system, leading to devastating consequences like data theft, unauthorized access, or even malware installation! Imagine an intruder slipping in unnoticed while you're busy browsing through documents — totally unsettling! To secure your systems, update Adobe Reader and Acrobat to the latest versions — 11.0.16 or 15.006.30172 for DC Classic. Additionally, consider enabling automatic updates to stay protected from vulnerabilities like this in the future. You've got this! By following these steps, you'll help keep your environment safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06410 · 93.6th percentile
Published
2016-05-11T10:00Z
EPSS history
Timeline
  • 11 MAY 10:00Z
    Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat…
    cvelistv5