CVE-2016-1116

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before…

published May 11, 2016

CVSS
—
EPSS
4%
Percentile
89.7
In the wild
Unconfirmed
What it is

⚠️ A not-so-simple memory corruption flaw allows attackers to run arbitrary code in Adobe Reader and Acrobat, making it a trickier situation than it appears! 🔥 Think of it like a restaurant kitchen where a delivery person hands over a box without checking the ingredients. If the chef blindly accepts it, they might accidentally create a dish with dangerous toxins instead of the intended meal! This vulnerability could lead to attackers executing malicious code on your system or causing a denial of service. Imagine the chaos if a hostile ingredient disrupts the order of the kitchen, leading to a complete shutdown! Your documents could be at risk or even cause your whole system to crash unexpectedly.

Put simply

Think of it like a restaurant kitchen where a delivery person hands over a box without checking the ingredients. If the chef blindly accepts it, they might accidentally create a dish with dangerous toxins instead of the intended meal! This flaw in Adobe Reader and Acrobat allows for arbitrary code execution due to memory corruption via unspecified vectors. Attackers can exploit this to manipulate the application's behavior, creating unsafe conditions.

What to do

This vulnerability could lead to attackers executing malicious code on your system or causing a denial of service. Imagine the chaos if a hostile ingredient disrupts the order of the kitchen, leading to a complete shutdown! Your documents could be at risk or even cause your whole system to crash unexpectedly. Update your Adobe Reader and Acrobat to the latest versions to patch this vulnerability: ensure you're on version 11.0.16 or later for Reader, and for Acrobat DC users, aim for version 15.016.20039 and above. Regularly check for updates and enable automatic updates if possible! You've got this! Follow these steps, and you'll have your systems protected in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03716 · 89.7th percentile
Published
2016-05-11T10:00Z
EPSS history
Timeline
  • 11 MAY 10:00Z
    Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before…
    cvelistv5