CVE-2016-6948

Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before…

published October 13, 2016

CVSS
—
EPSS
6%
Percentile
92.9
In the wild
Unconfirmed
What it is

⚠️ A stealthy memory corruption bug in Adobe Reader and Acrobat could allow attackers to run arbitrary code with just the right file! Think of this like a restaurant where a waiter serves a dish with a dangerous ingredient, and the chef never bothers to check the order slips. If the wrong ingredient gets in, it could ruin the entire meal—or worse! If exploited, an attacker could cause denial of service or run malicious code on a user's system, leading to potentially devastating consequences like data theft or system control. Imagine a dinner party where the dish is tainted; it could mean a total disaster for everyone involved!

Put simply

Think of this like a restaurant where a waiter serves a dish with a dangerous ingredient, and the chef never bothers to check the order slips. If the wrong ingredient gets in, it could ruin the entire meal—or worse! This vulnerability allows memory corruption due to unspecified vectors, which can lead to arbitrary code execution or denial of service in older versions of Adobe Reader and Acrobat. It's like a hole in the kitchen that lets in unexpected pests.

What to do

If exploited, an attacker could cause denial of service or run malicious code on a user's system, leading to potentially devastating consequences like data theft or system control. Imagine a dinner party where the dish is tainted; it could mean a total disaster for everyone involved! To protect yourself, update Adobe Reader and Acrobat to the latest versions: 11.0.18 or higher for older versions, and 15.006.30243 or higher for DC Classic and 15.020.20039 or higher for DC Continuous. Don't leave your kitchen open to intruders! You've got this! With a simple update, you’ll have your defenses up and running in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05704 · 92.9th percentile
Published
2016-10-13T19:00Z
EPSS history
Timeline
  • 13 OCT 19:00Z
    Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before…
    cvelistv5