CVE-2016-1008
HIGHAdobe Acrobat and Reader < 11.0.15 - Untrusted Search Path DLL Hijacking
Title source: llmDescription
Untrusted search path vulnerability in Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat Reader DC Classic before 15.006.30121, and Acrobat and Acrobat Reader DC Continuous before 15.010.20060 on Windows and OS X allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/84216
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1035199
Third Party Advisory x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-16-190
Patch, Vendor Advisory x_refsource_confirm
https://helpx.adobe.com/security/products/acrobat/apsb16-09.html
Scores
CVSS v3
8.4
EPSS
0.0110
EPSS Percentile
61.7%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-20
Status
published
Products (6)
adobe/acrobat
< 11.0.14
adobe/acrobat_dc
< 15.006.30119
adobe/acrobat_dc
< 15.010.20059
adobe/acrobat_reader
< 11.0.14
adobe/acrobat_reader_dc
15.006.30119
adobe/acrobat_reader_dc
< 15.010.20059
Published
Mar 09, 2016
Tracked Since
Feb 18, 2026