CVE-2016-1084

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before…

published May 11, 2016

CVSS
—
EPSS
4%
Percentile
89.7
In the wild
Unconfirmed
What it is

🚨 A vulnerability that can lead to arbitrary code execution lurks in Adobe Reader and Acrobat versions before 11.0.16 — it’s like letting a stranger into your house without checking their ID! 🔥 Imagine a restaurant where diners can dictate the menu without any oversight. In this case, the application accepts commands from unverified sources, allowing attackers to serve themselves a dangerous dish of code execution or service disruption. If exploited, an attacker could run any code on your machine or cause your application to crash, leading to a frustrating denial of service. This could potentially expose sensitive information or disrupt critical business operations — absolutely devastating!

Put simply

Imagine a restaurant where diners can dictate the menu without any oversight. In this case, the application accepts commands from unverified sources, allowing attackers to serve themselves a dangerous dish of code execution or service disruption. This vulnerability allows attackers to execute arbitrary code or cause memory corruption in Adobe Reader and Acrobat via unspecified vectors, meaning they can manipulate the application's behavior without proper validation.

What to do

If exploited, an attacker could run any code on your machine or cause your application to crash, leading to a frustrating denial of service. This could potentially expose sensitive information or disrupt critical business operations — absolutely devastating! To protect yourself, ensure you update Adobe Reader and Acrobat to versions 11.0.16 or higher. For Acrobat and Acrobat Reader DC, upgrade to at least 15.006.30172 or 15.016.20039 respectively. Regularly check for updates to keep your software secure! You’ve got this! Stay proactive, and you’ll have your defenses strong in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03716 · 89.7th percentile
Published
2016-05-11T10:00Z
EPSS history
Timeline
  • 11 MAY 10:00Z
    Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before…
    cvelistv5