CVE-2016-1077

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before…

published May 11, 2016

CVSS
—
EPSS
17%
Percentile
97.1
In the wild
Unconfirmed
What it is

⚠️ A subtle vulnerability lurking in Adobe Reader and Acrobat might let attackers execute arbitrary code or even crash your system — like a surprise ingredient in a recipe gone wrong! Think of it as a restaurant chef who doesn’t double-check the order before sending it out — one unexpected item could spoil the entire meal. Similarly, this vulnerability allows attackers to inject malicious code without warning, putting your system at risk. If exploited, this could lead to a full system compromise, where attackers can run arbitrary code or cause a denial of service. Imagine someone sneaking into your kitchen, completely uninvited, and having a free run of your pantry — that’s the level of access malicious actors could get here.

Put simply

Think of it as a restaurant chef who doesn’t double-check the order before sending it out — one unexpected item could spoil the entire meal. Similarly, this vulnerability allows attackers to inject malicious code without warning, putting your system at risk. This vulnerability allows for arbitrary code execution or denial of service due to memory corruption in several versions of Adobe Reader and Acrobat, affecting both Windows and OS X platforms. The exact vectors are unspecified, which makes it particularly concerning.

What to do

If exploited, this could lead to a full system compromise, where attackers can run arbitrary code or cause a denial of service. Imagine someone sneaking into your kitchen, completely uninvited, and having a free run of your pantry — that’s the level of access malicious actors could get here. To protect yourself, update Adobe Reader and Acrobat to version 11.0.16 or later, or 15.006.30172 for Acrobat DC Classic, and 15.016.20039 for Acrobat DC Continuous. Keeping your software updated is the best defense against such vulnerabilities! You’ve got this! Stay proactive and keep your software up to date — it’s the best way to secure your digital world! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.17411 · 97.1th percentile
Published
2016-05-11T10:00Z
EPSS history
Timeline
  • 11 MAY 10:00Z
    Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before…
    cvelistv5