CVE-2016-4097

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before…

published May 11, 2016

CVSS
—
EPSS
4%
Percentile
90.6
In the wild
Unconfirmed
What it is

⚡ Adobe Reader and Acrobat have a sneaky flaw that lets attackers execute arbitrary code with just a crafty PDF — like giving someone the keys to your digital front door! 🔑 Imagine handing over a package that looks perfectly normal, but inside it holds the power to unlock your entire house. That's what this vulnerability represents: an unsuspecting PDF that can open the floodgates to your system. An attacker could take control of your device or trigger a denial of service, potentially crashing your application or leaking sensitive data. The implications of this flaw are significant, as it could lead to devastating breaches if not addressed promptly.

Put simply

Imagine handing over a package that looks perfectly normal, but inside it holds the power to unlock your entire house. That's what this vulnerability represents: an unsuspecting PDF that can open the floodgates to your system. This vulnerability in Adobe Reader and Acrobat allows for memory corruption, which could be exploited to run arbitrary code. It affects versions before 11.0.16 on Windows and OS X, and multiple versions of Acrobat and Reader DC.

What to do

An attacker could take control of your device or trigger a denial of service, potentially crashing your application or leaking sensitive data. The implications of this flaw are significant, as it could lead to devastating breaches if not addressed promptly. Immediately update Adobe Reader and Acrobat to version 11.0.16 or later. Also, ensure all installations of Acrobat and Acrobat Reader DC are updated to at least version 15.006.30172 or 15.016.20039. Regularly review security updates to stay protected. You've got this! By following these steps, you'll tighten your defenses and keep those sneaky attackers at bay! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04079 · 90.6th percentile
Published
2016-05-11T10:00Z
EPSS history
Timeline
  • 11 MAY 10:00Z
    Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before…
    cvelistv5