CVE-2016-6972

Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before…

published October 13, 2016

CVSS
—
EPSS
5%
Percentile
92.2
In the wild
Unconfirmed
What it is

⚠️ A pesky flaw in Adobe Reader and Acrobat can allow a crafty attacker to execute arbitrary code! It’s like inviting someone into your home without checking their ID first — and that could lead to chaos! 🔥 Think of this vulnerability as a poorly designed guest check-in process at a hotel. If the staff lets anyone in without verifying their identity, it opens the door for trouble — the attacker can then wreak havoc inside, just like a mischievous guest throwing a wild party! An attacker could exploit this vulnerability to run arbitrary code on the victim's system, potentially taking control and causing devastating damage. Alternatively, it could lead to a denial of service, crashing your favorite PDF tool when you need it the most. Talk about frustrating!

Put simply

Think of this vulnerability as a poorly designed guest check-in process at a hotel. If the staff lets anyone in without verifying their identity, it opens the door for trouble — the attacker can then wreak havoc inside, just like a mischievous guest throwing a wild party! This vulnerability affects Adobe Reader and Acrobat versions before 11.0.18 and the DC variants before specified versions, allowing attackers to manipulate memory to execute unintended commands or crash the application.

What to do

An attacker could exploit this vulnerability to run arbitrary code on the victim's system, potentially taking control and causing devastating damage. Alternatively, it could lead to a denial of service, crashing your favorite PDF tool when you need it the most. Talk about frustrating! To protect yourself, ensure you update Adobe Reader and Acrobat to the latest versions: 11.0.18 or later, 15.006.30243 or later for Classic, and 15.020.20039 or newer for Continuous. Regularly check for updates to stay one step ahead! You've got this! Stay vigilant and keep your software updated, and you’ll have your security superhero cape on in no time! 🦸

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05038 · 92.2th percentile
Published
2016-10-13T19:00Z
EPSS history
Timeline
  • 13 OCT 19:00Z
    Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before…
    cvelistv5