CVE-2016-1074

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before…

published May 11, 2016

CVSS
—
EPSS
6%
Percentile
93.1
In the wild
Unconfirmed
What it is

🚨 Adobe Reader and Acrobat have a sneaky bug that lets attackers execute arbitrary code—think of it as a waiter who serves you whatever anyone else ordered instead of your meal! 🍽️ Imagine walking into a restaurant and instead of getting your own meal, the waiter hands you whatever the last customer ordered, completely ignoring your preferences. This vulnerability allows malicious actors to use the same principle to gain control over your system by tricking Adobe into executing their code. If exploited, an attacker could execute arbitrary code or cause a memory corruption, leading to a complete system compromise or crash. This could mean unauthorized access to sensitive documents or even total denial of service, leaving users unable to open their PDFs. Not a great dining experience, right?

Put simply

Imagine walking into a restaurant and instead of getting your own meal, the waiter hands you whatever the last customer ordered, completely ignoring your preferences. This vulnerability allows malicious actors to use the same principle to gain control over your system by tricking Adobe into executing their code. The vulnerability exists in Adobe Reader and Acrobat before version 11.0.16, and various versions of Acrobat and Acrobat Reader DC, allowing attackers to exploit unspecified vectors to execute arbitrary code or cause a denial of service.

What to do

If exploited, an attacker could execute arbitrary code or cause a memory corruption, leading to a complete system compromise or crash. This could mean unauthorized access to sensitive documents or even total denial of service, leaving users unable to open their PDFs. Not a great dining experience, right? Update Adobe Reader and Acrobat to the latest versions: 11.0.16 or higher, and for DC Classic, ensure you have at least 15.006.30172. For DC Continuous, make sure it’s updated to 15.016.20039 or later. Regularly check for patches to keep your software secure! You’ve got this! Follow these steps to keep your PDFs safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05875 · 93.1th percentile
Published
2016-05-11T10:00Z
EPSS history
Timeline
  • 11 MAY 10:00Z
    Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before…
    cvelistv5