CVE-2016-1094

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat…

published May 11, 2016

CVSS
—
EPSS
6%
Percentile
93.6
In the wild
Unconfirmed
What it is

🚨 A sneaky use-after-free vulnerability in Adobe Reader and Acrobat can leave the door wide open for attackers to execute arbitrary code on your system! 🔥 Think of it like a restaurant where the chef mistakenly serves a dish that's been dropped on the floor — it could create a nasty situation if someone decides to eat it anyway! In this case, an unprocessed resource could lead to a disastrous outcome. An attacker could potentially take complete control of your system, run malicious code, and wreak havoc on your data. This could lead to unauthorized access, data theft, or even permanent damage to your files. It's a recipe for chaos!

Put simply

Think of it like a restaurant where the chef mistakenly serves a dish that's been dropped on the floor — it could create a nasty situation if someone decides to eat it anyway! In this case, an unprocessed resource could lead to a disastrous outcome. This use-after-free vulnerability allows attackers to execute arbitrary code by manipulating how memory is handled in Adobe Reader and Acrobat, particularly in the affected versions prior to 11.0.16 and certain versions of DC.

What to do

An attacker could potentially take complete control of your system, run malicious code, and wreak havoc on your data. This could lead to unauthorized access, data theft, or even permanent damage to your files. It's a recipe for chaos! To protect yourself, immediately upgrade to Adobe Reader and Acrobat version 11.0.16 or later, and ensure that all DC versions are updated to at least 15.016.20039. Regularly check for security patches from Adobe to stay safe! You've got this! By updating your software, you'll keep your system secure and bulletproof against this vulnerability. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06410 · 93.6th percentile
Published
2016-05-11T10:00Z
EPSS history
Timeline
  • 11 MAY 10:00Z
    Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat…
    cvelistv5