CVE-2016-4107

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat…

published May 11, 2016

CVSS
—
EPSS
8%
Percentile
94.5
In the wild
Unconfirmed
What it is

🚨 A use-after-free vulnerability in Adobe Reader and Acrobat is like a waiter serving your meal after you’ve already left the restaurant! Imagine a busy restaurant where a server mistakenly delivers the wrong dish to the table after you’ve walked out. The mistake can lead to unexpected chaos — similarly, this vulnerability lets attackers execute arbitrary code when the application mishandles memory, allowing them to take control of your device. An attacker could exploit this vulnerability to run any code on your device, potentially leading to complete system compromise. It’s an absolute disaster waiting to happen if you're using outdated versions of Adobe Reader or Acrobat!

Put simply

Imagine a busy restaurant where a server mistakenly delivers the wrong dish to the table after you’ve walked out. The mistake can lead to unexpected chaos — similarly, this vulnerability lets attackers execute arbitrary code when the application mishandles memory, allowing them to take control of your device. This use-after-free vulnerability exists when the application fails to manage memory properly, enabling attackers to execute arbitrary code through unspecified vectors. A successful exploit could allow an attacker to gain unauthorized access to the system.

What to do

An attacker could exploit this vulnerability to run any code on your device, potentially leading to complete system compromise. It’s an absolute disaster waiting to happen if you're using outdated versions of Adobe Reader or Acrobat! To protect yourself, update Adobe Reader and Acrobat to version 11.0.16 or later, and for Acrobat DC Classic, ensure it is updated to version 15.006.30172 or later. Check all your installations and apply the updates immediately! You’ve got this! Stay vigilant and keep your software up to date to keep your systems safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07539 · 94.5th percentile
Published
2016-05-11T10:00Z
EPSS history
Timeline
  • 11 MAY 10:00Z
    Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat…
    cvelistv5