CVE-2016-6995

Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before…

published October 13, 2016

CVSS
—
EPSS
5%
Percentile
92.2
In the wild
Unconfirmed
What it is

🚨 A memory corruption vulnerability in Adobe Reader could let attackers run arbitrary code — think of it as a recipe book with missing pages that could lead to disastrous meals! 🔥 Imagine a diner where the chef is given a recipe that skips crucial steps; one miscommunication leads to a recipe gone wrong, potentially serving up a disaster. That's what can happen here if an attacker exploits this vulnerability — they can override the expected operation of the application entirely! If exploited, this could lead to serious consequences like unauthorized access to sensitive data or a complete application crash. It's like opening the front door of your house and inviting in trouble instead of guests!

Put simply

Imagine a diner where the chef is given a recipe that skips crucial steps; one miscommunication leads to a recipe gone wrong, potentially serving up a disaster. That's what can happen here if an attacker exploits this vulnerability — they can override the expected operation of the application entirely! This vulnerability allows arbitrary code execution or denial of service due to memory corruption in specific versions of Adobe Reader and Acrobat, affecting both Windows and OS X platforms. Attackers can exploit unspecified vectors to trigger this flaw, enabling them to take control of the application.

What to do

If exploited, this could lead to serious consequences like unauthorized access to sensitive data or a complete application crash. It's like opening the front door of your house and inviting in trouble instead of guests! Upgrade to Adobe Reader and Acrobat version 11.0.18 or higher for older applications, or version 15.006.30243 for Acrobat DC Classic and version 15.020.20039 for Acrobat DC Continuous. Regularly check for updates to ensure you’re protected from vulnerabilities like this one! You've got this! Stay proactive, and your digital fortress will remain strong! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05038 · 92.2th percentile
Published
2016-10-13T19:00Z
EPSS history
Timeline
  • 13 OCT 19:00Z
    Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before…
    cvelistv5