CVE-2016-6970

Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before…

published October 13, 2016

CVSS
—
EPSS
5%
Percentile
92.2
In the wild
Unconfirmed
What it is

⚠️ An unexpected code-execution opportunity lurks in Adobe Reader and Acrobat! Attackers can exploit unspecified vectors to wreak havoc on your system. 😱 Think of it like a restaurant accepting orders without verifying them—an attacker can slip in a dish that could spoil the whole meal. This vulnerability allows arbitrary code execution, much like a rogue chef who serves up something unsafe without anyone noticing. If exploited, this vulnerability could lead to arbitrary code execution or a denial of service, effectively crashing your system. An attacker could gain control of your device or disrupt your workflow, leading to potentially devastating consequences.

Put simply

Think of it like a restaurant accepting orders without verifying them—an attacker can slip in a dish that could spoil the whole meal. This vulnerability allows arbitrary code execution, much like a rogue chef who serves up something unsafe without anyone noticing. This vulnerability affects Adobe Reader and Acrobat versions prior to 11.0.18 and various versions in the DC Classic and Continuous lines on both Windows and OS X. It allows attackers to execute arbitrary code or cause memory corruption via unspecified vectors.

What to do

If exploited, this vulnerability could lead to arbitrary code execution or a denial of service, effectively crashing your system. An attacker could gain control of your device or disrupt your workflow, leading to potentially devastating consequences. To safeguard your system, patch Adobe Reader and Acrobat to at least version 11.0.18 for standard installations, or update to version 15.006.30243 and 15.020.20039 for the DC Classic and Continuous, respectively. Regularly check for updates to keep your software safe from future vulnerabilities. You've got this! With a quick update, you’ll lock down your system and keep those pesky attackers at bay. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05038 · 92.2th percentile
Published
2016-10-13T19:00Z
EPSS history
Timeline
  • 13 OCT 19:00Z
    Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before…
    cvelistv5