CVE-2016-6937

Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before…

published September 17, 2016

CVSS
—
EPSS
7%
Percentile
93.8
In the wild
Unconfirmed
What it is

⚠️ A single, sneaky glitch in Adobe Reader could let attackers execute random code — like a magician pulling unexpected tricks out of a hat! 🎩 Think of Adobe Reader as a seemingly harmless ticket booth at a concert. Unfortunately, this vulnerability lets a mischievous attendee slip through without a ticket and wreak havoc on the show, capturing the microphone and changing the entire performance! If exploited, an attacker could execute arbitrary code or cause the application to crash, leading to a denial of service. This means sensitive data could be compromised or your users might face an unexpected interruption, leaving them frustrated and your reputation at risk.

Put simply

Think of Adobe Reader as a seemingly harmless ticket booth at a concert. Unfortunately, this vulnerability lets a mischievous attendee slip through without a ticket and wreak havoc on the show, capturing the microphone and changing the entire performance! This vulnerability in Adobe Reader and Acrobat allows memory corruption through unspecified vectors, which could ultimately let attackers execute arbitrary commands on the system running the software.

What to do

If exploited, an attacker could execute arbitrary code or cause the application to crash, leading to a denial of service. This means sensitive data could be compromised or your users might face an unexpected interruption, leaving them frustrated and your reputation at risk. Update Adobe Reader and Acrobat to the latest versions: 11.0.17 or higher for older versions, and 15.006.30198 or higher for DC Classic, as well as 15.017.20050 or higher for DC Continuous. Regularly check for and apply updates to stay secure! You've got this! Keeping your software updated will help you maintain hero status in the fight against vulnerabilities! 🦸

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06615 · 93.8th percentile
Published
2016-09-17T01:00Z
EPSS history
Timeline
  • 17 SEP 01:00Z
    Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before…
    cvelistv5