CVE-2016-6951

Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before…

published October 13, 2016

CVSS
—
EPSS
5%
Percentile
92.2
In the wild
Unconfirmed
What it is

⚠️ Adobe Reader and Acrobat have a sneaky vulnerability lurking that allows attackers to execute arbitrary code! It's like a restaurant where the chef prepares any dish without checking the order—dangerous! Picture a restaurant kitchen where the chef accepts any order without verifying it. If someone shouts for a dish, they might get served something unsafe—just like how this vulnerability lets attackers run harmful commands without proper checks! An attacker could exploit this vulnerability to execute malicious code, potentially leading to a full system compromise or causing the application to crash. This could result in loss of data or disrupt critical workflows, leaving users in a bind!

Put simply

Picture a restaurant kitchen where the chef accepts any order without verifying it. If someone shouts for a dish, they might get served something unsafe—just like how this vulnerability lets attackers run harmful commands without proper checks! This vulnerability in Adobe Reader and Acrobat allows for arbitrary code execution or denial of service through unspecified vectors. Essentially, it results from memory corruption that can be triggered by attacking the application in a certain way.

What to do

An attacker could exploit this vulnerability to execute malicious code, potentially leading to a full system compromise or causing the application to crash. This could result in loss of data or disrupt critical workflows, leaving users in a bind! To protect your systems, immediately update Adobe Reader and Acrobat to version 11.0.18 or later, and ensure that DC Classic and Continuous versions are updated to 15.006.30243 and 15.020.20039 respectively. Regularly check for updates to stay secure! You've got this! By taking these steps, you’re fortifying your defenses and becoming a true security hero! 🦸

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05038 · 92.2th percentile
Published
2016-10-13T19:00Z
EPSS history
Timeline
  • 13 OCT 19:00Z
    Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before…
    cvelistv5