CVE-2016-6979

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat…

published October 13, 2016

CVSS
—
EPSS
6%
Percentile
93.1
In the wild
Unconfirmed
What it is

🚨 A crafty use-after-free vulnerability in Adobe Reader and Acrobat could allow attackers to run arbitrary code — like a chef accidentally using a broken spatula that lets their secret ingredients spill everywhere! Think of this vulnerability as a kitchen where a chef carelessly leaves behind a broken tool. If someone sneaks in and uses that tool, they could create a chaotic dish that no one ordered, ruining everything! This issue could allow an attacker to execute arbitrary code on your machine, potentially leading to unauthorized access, data theft, or even complete system control. The risks are high, and a successful attack could turn your trusted document viewer into a portal for malicious activity.

Put simply

Think of this vulnerability as a kitchen where a chef carelessly leaves behind a broken tool. If someone sneaks in and uses that tool, they could create a chaotic dish that no one ordered, ruining everything! The use-after-free flaw in Adobe Reader and Acrobat versions before 11.0.18 and others allows attackers to exploit memory that has already been freed, leading to the execution of arbitrary code. This is done through unspecified vectors, making it a sneaky and dangerous vulnerability.

What to do

This issue could allow an attacker to execute arbitrary code on your machine, potentially leading to unauthorized access, data theft, or even complete system control. The risks are high, and a successful attack could turn your trusted document viewer into a portal for malicious activity. To protect yourself, update Adobe Reader and Acrobat to version 11.0.18 or later, or ensure your installations of Acrobat Reader DC Classic and Continuous are updated to 15.006.30243 or 15.020.20039, respectively. Regularly check for updates to keep your software secure! You've got this! With a few updates, you'll be back to enjoying your PDFs safely. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05813 · 93.1th percentile
Published
2016-10-13T19:00Z
EPSS history
Timeline
  • 13 OCT 19:00Z
    Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat…
    cvelistv5