CVE-2016-6963

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat…

published October 13, 2016

CVSS
—
EPSS
6%
Percentile
93.1
In the wild
Unconfirmed
What it is

🚨 A use-after-free vulnerability could let attackers execute arbitrary code in Adobe Reader and Acrobat! 🔥 Think of it like a restaurant that serves food that no longer meets health standards; someone can order a dish that triggers a dangerous recipe that's been improperly stored. With the wrong command, the software could serve up a menu item that wreaks havoc instead of delight! An attacker could leverage this flaw to take control of your system, potentially accessing sensitive files, installing malicious software, or even compromising your entire network. This is no minor inconvenience; the consequences could be absolutely devastating!

Put simply

Think of it like a restaurant that serves food that no longer meets health standards; someone can order a dish that triggers a dangerous recipe that's been improperly stored. With the wrong command, the software could serve up a menu item that wreaks havoc instead of delight! The use-after-free vulnerability occurs when the software continues to reference memory that has already been freed, potentially allowing arbitrary code to run in that space. This mishap could stem from various unspecified vectors, putting users at risk.

What to do

An attacker could leverage this flaw to take control of your system, potentially accessing sensitive files, installing malicious software, or even compromising your entire network. This is no minor inconvenience; the consequences could be absolutely devastating! To protect yourself, update Adobe Reader and Acrobat to versions 11.0.18, 15.006.30243, or 15.020.20039 or later. Regularly check for updates to keep your software secure and consider implementing additional security measures like sandboxing. 🚀 You’ve got this! With these updates and precautions, you’ll be a security hero in no time! 🦸‍♂️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05813 · 93.1th percentile
Published
2016-10-13T19:00Z
EPSS history
Timeline
  • 13 OCT 19:00Z
    Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat…
    cvelistv5