CVE-2016-6960

Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before…

published October 13, 2016

CVSS
—
EPSS
5%
Percentile
92.2
In the wild
Unconfirmed
What it is

⚠️ A hidden exploit is brewing in Adobe Reader that could lead to arbitrary code execution! Just like a surprise guest crashing your dinner party, you’ll want to know how to keep them out! Think of Adobe Reader as a restaurant where patrons can place orders. If the kitchen doesn’t double-check the ingredients and instructions, an unauthorized dish could be served, leading to chaos! An attacker could use this vulnerability to execute arbitrary code on your system or cause a denial of service, leaving your documents in disarray. Imagine your computer suddenly deciding to throw a tantrum and refuse to serve any of your PDFs!

Put simply

Think of Adobe Reader as a restaurant where patrons can place orders. If the kitchen doesn’t double-check the ingredients and instructions, an unauthorized dish could be served, leading to chaos! This memory corruption vulnerability allows attackers to exploit unspecified vectors in Adobe Reader and Acrobat, potentially leading to arbitrary code execution or denial of service. Most importantly, it's present in various affected versions, including those before 11.0.18 and DC Continuous versions prior to 15.020.20039.

What to do

An attacker could use this vulnerability to execute arbitrary code on your system or cause a denial of service, leaving your documents in disarray. Imagine your computer suddenly deciding to throw a tantrum and refuse to serve any of your PDFs! To safeguard your system, update Adobe Reader and Acrobat to the latest versions immediately. Ensure you’re running at least 11.0.18 or 15.006.30243 for DC Classic and 15.020.20039 for DC Continuous. Regularly check for security updates to stay protected! You've got this! Follow these steps, and you’ll have your defenses locked down in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05038 · 92.2th percentile
Published
2016-10-13T19:00Z
EPSS history
Timeline
  • 13 OCT 19:00Z
    Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before…
    cvelistv5