CVE-2016-6967

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat…

published October 13, 2016

CVSS
—
EPSS
6%
Percentile
93.1
In the wild
Unconfirmed
What it is

⚠️ A sneaky use-after-free flaw in Adobe Reader and Acrobat could let attackers execute arbitrary code, and it affects multiple versions! 📄 Think of it like a library where a book is incorrectly checked out and left on a table, allowing anyone passing by to scribble their own notes in it — that’s the kind of access this vulnerability opens up! An attacker could exploit this vulnerability to run pretty much any code they want on your machine, potentially leading to complete system compromise. This could mean unauthorized access to sensitive data or even full control over your device — absolutely devastating!

Put simply

Think of it like a library where a book is incorrectly checked out and left on a table, allowing anyone passing by to scribble their own notes in it — that’s the kind of access this vulnerability opens up! This use-after-free vulnerability occurs when the application tries to access memory that has already been freed. This allows attackers to manipulate the program's control flow, leading to arbitrary code execution.

What to do

An attacker could exploit this vulnerability to run pretty much any code they want on your machine, potentially leading to complete system compromise. This could mean unauthorized access to sensitive data or even full control over your device — absolutely devastating! To stay safe, update Adobe Reader and Acrobat to at least version 11.0.18, 15.006.30243, or 15.020.20039 depending on your installation. Regularly check for patches and ensure your software is up to date to mitigate these risks! You've got this! Stay proactive, and you'll keep your systems secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05813 · 93.1th percentile
Published
2016-10-13T19:00Z
EPSS history
Timeline
  • 13 OCT 19:00Z
    Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat…
    cvelistv5