CVE-2016-6946

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat…

published October 13, 2016

CVSS
—
EPSS
6%
Percentile
93.1
In the wild
Unconfirmed
What it is

⚠️ A sneaky use-after-free vulnerability lurks in Adobe Reader and Acrobat! Before you panic, let's dive into how an attacker can exploit this to execute arbitrary code. 🔥 Think of Adobe Reader and Acrobat like a library with valuable books. If someone misfiles a book after checking it out, the next visitor might pull it off the shelf and accidentally receive the wrong information — or worse, an empty space where a dangerous book should be! An attacker could potentially slip through the cracks and execute arbitrary code, leading to unauthorized access or manipulation of your system. Imagine the chaos of someone rewriting the library's entire catalog just because they found a way to exploit that misfiled book!

Put simply

Think of Adobe Reader and Acrobat like a library with valuable books. If someone misfiles a book after checking it out, the next visitor might pull it off the shelf and accidentally receive the wrong information — or worse, an empty space where a dangerous book should be! This use-after-free vulnerability occurs in Adobe Reader and Acrobat, allowing attackers to execute code via unspecified vectors. It means the software is mishandling memory in a way that can be manipulated by an attacker to gain control.

What to do

An attacker could potentially slip through the cracks and execute arbitrary code, leading to unauthorized access or manipulation of your system. Imagine the chaos of someone rewriting the library's entire catalog just because they found a way to exploit that misfiled book! To protect yourself, patch Adobe Reader and Acrobat to versions 11.0.18 or later, and for Acrobat Reader DC Classic, update to at least 15.006.30243. Regularly check for updates and monitor your software for any anomalies. 🛡️ You've got this! Stay vigilant, apply those patches, and you'll keep your digital library safe from harm! 📚✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05813 · 93.1th percentile
Published
2016-10-13T19:00Z
EPSS history
Timeline
  • 13 OCT 19:00Z
    Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat…
    cvelistv5