CVE-2016-6945

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat…

published October 13, 2016

CVSS
—
EPSS
6%
Percentile
93.1
In the wild
Unconfirmed
What it is

🚨 A use-after-free bug in Adobe Reader could let attackers run their code simply by exploiting a document! Think of it like a restaurant chef who accidentally throws away a critical ingredient in the middle of preparing a dish. If the sous-chef jumps in without checking, they might use whatever they have available, resulting in a dish no one ordered! If successfully exploited, an attacker could execute arbitrary code, potentially taking complete control of the victim's system. This could lead to data theft, unauthorized access, or even system corruption—definitely not the kind of surprise you want!

Put simply

Think of it like a restaurant chef who accidentally throws away a critical ingredient in the middle of preparing a dish. If the sous-chef jumps in without checking, they might use whatever they have available, resulting in a dish no one ordered! This vulnerability allows attackers to exploit the improper management of memory through a use-after-free condition, which could lead to arbitrary code execution on systems using vulnerable versions of Adobe Reader and Acrobat.

What to do

If successfully exploited, an attacker could execute arbitrary code, potentially taking complete control of the victim's system. This could lead to data theft, unauthorized access, or even system corruption—definitely not the kind of surprise you want! To protect yourself, update to Adobe Reader and Acrobat version 11.0.18 or later, and for the DC versions, ensure you're on 15.006.30243 or 15.020.20039. Regularly check for updates and apply them promptly! You've got this! Keep your software updated and stay secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05813 · 93.1th percentile
Published
2016-10-13T19:00Z
EPSS history
Timeline
  • 13 OCT 19:00Z
    Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat…
    cvelistv5