CVE-2016-1117

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before…

published May 11, 2016

CVSS
—
EPSS
6%
Percentile
93.6
In the wild
Unconfirmed
What it is

⚠️ A crafty loophole lets attackers bypass JavaScript execution restrictions in Adobe Reader! This could open the door to some sneaky exploits. 🔥 Think of it like a hotel that forgot to check IDs at the pool. Anyone can slip in without verification, which could lead to all sorts of mischief! With this vulnerability, an attacker could run unauthorized JavaScript on your document, potentially leading to data theft or malicious actions without your knowledge. It’s like handing over the keys to your house and forgetting to check who’s coming in!

Put simply

Think of it like a hotel that forgot to check IDs at the pool. Anyone can slip in without verification, which could lead to all sorts of mischief! This vulnerability in Adobe Reader and Acrobat allows attackers to bypass JavaScript API execution restrictions through unspecified vectors, which is a hole in the barrier meant to keep unauthorized code at bay.

What to do

With this vulnerability, an attacker could run unauthorized JavaScript on your document, potentially leading to data theft or malicious actions without your knowledge. It’s like handing over the keys to your house and forgetting to check who’s coming in! Upgrade to Adobe Reader and Acrobat version 11.0.16, 15.006.30172, or 15.016.20039 or later to close this loophole. Don't forget to keep an eye on your software for future updates! You've got this! With a quick upgrade, you'll boost your defenses and keep that sneaky code out! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06316 · 93.6th percentile
Published
2016-05-11T10:00Z
EPSS history
Timeline
  • 11 MAY 10:00Z
    Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before…
    cvelistv5