CVE-2016-6964

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat…

published October 13, 2016

CVSS
—
EPSS
6%
Percentile
93.1
In the wild
Unconfirmed
What it is

🚨 A crafty use-after-free vulnerability in Adobe Reader could let attackers execute arbitrary code - it's like sending a party invitation that never got sent and showing up at the door anyway! 🔥 Think of this vulnerability as a waiter who forgets to take a menu away after the meal, allowing a sneaky diner to use it again and make unauthorized orders. That’s how an attacker can exploit this flaw to execute their own code, slipping through the cracks in the system! If successfully exploited, an attacker could take control of your system, running rogue code that might access sensitive information, manipulate files, or even install malware. This could lead to data breaches and a complete loss of trust in your system security.

Put simply

Think of this vulnerability as a waiter who forgets to take a menu away after the meal, allowing a sneaky diner to use it again and make unauthorized orders. That’s how an attacker can exploit this flaw to execute their own code, slipping through the cracks in the system! This use-after-free vulnerability in Adobe Reader and Acrobat allows attackers to execute arbitrary code through unspecified vectors, meaning they can manipulate the memory management to regain access to freed memory that shouldn’t be available anymore.

What to do

If successfully exploited, an attacker could take control of your system, running rogue code that might access sensitive information, manipulate files, or even install malware. This could lead to data breaches and a complete loss of trust in your system security. Update your Adobe Reader and Acrobat to version 11.0.18 or later, as well as Acrobat and Acrobat Reader DC Classic to version 15.006.30243 or later. For Continuous releases, upgrade to version 15.020.20039 or later. Regularly remind users to be cautious with unexpected PDFs! You’ve got this! With these updates, you can lock down your system and keep those pesky attackers out! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05813 · 93.1th percentile
Published
2016-10-13T19:00Z
EPSS history
Timeline
  • 13 OCT 19:00Z
    Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat…
    cvelistv5