CVE-2016-1120

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before…

published May 11, 2016

CVSS
—
EPSS
4%
Percentile
89.7
In the wild
Unconfirmed
What it is

⚠️ It’s like leaving your house unlocked during a storm — Adobe Reader and Acrobat versions before 11.0.16 have a sneaky memory corruption issue that could let attackers run wild! 🔥 Think of Adobe Reader as a restaurant kitchen that’s never checked for expired ingredients. A single mistake in the recipe could lead to a dish that poisons the entire menu. In this case, attackers could serve up malicious code or cause a chaotic shutdown instead of a delicious PDF! If an attacker exploits this vulnerability, they could potentially execute arbitrary code on your machine, which is absolutely devastating! Not only could they access sensitive information, but they could also crash your system, leading to a denial of service that leaves your productivity in shambles. This is a serious threat, especially if you're handling important documents!

Put simply

Think of Adobe Reader as a restaurant kitchen that’s never checked for expired ingredients. A single mistake in the recipe could lead to a dish that poisons the entire menu. In this case, attackers could serve up malicious code or cause a chaotic shutdown instead of a delicious PDF! This vulnerability allows for memory corruption in Adobe Reader and Acrobat on affected versions, enabling attackers to execute arbitrary code. This issue arises from unspecified vectors that bypass normal security checks, opening the door for malicious exploits.

What to do

If an attacker exploits this vulnerability, they could potentially execute arbitrary code on your machine, which is absolutely devastating! Not only could they access sensitive information, but they could also crash your system, leading to a denial of service that leaves your productivity in shambles. This is a serious threat, especially if you're handling important documents! To protect yourself, update Adobe Reader and Acrobat to version 11.0.16 or later, or ensure you’re on Acrobat DC Classic 15.006.30172 or later. Regularly check for updates to stay ahead of vulnerabilities like this one! This is fixable! Keep your software updated, and you’ll be a security hero in no time! 🦸‍♂️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03716 · 89.7th percentile
Published
2016-05-11T10:00Z
EPSS history
Timeline
  • 11 MAY 10:00Z
    Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before…
    cvelistv5