CVE-2016-1043
CRITICALAdobe Acrobat and Reader < 11.0.16 - Remote Code Execution
Title source: llmDescription
Integer overflow in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.
References (4)
Core 4
Core References
Third Party Advisory x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-16-286
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1035828
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/90516
Patch, Vendor Advisory x_refsource_confirm
https://helpx.adobe.com/security/products/acrobat/apsb16-14.html
Scores
CVSS v3
9.8
EPSS
0.0657
EPSS Percentile
93.0%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-119
Status
published
Products (6)
adobe/acrobat
< 11.0.15
adobe/acrobat_dc
< 15.006.30121
adobe/acrobat_dc
< 15.010.20060
adobe/acrobat_reader_dc
< 15.006.30121
adobe/acrobat_reader_dc
< 15.010.20060
adobe/reader
< 11.0.15
Published
May 11, 2016
Tracked Since
Feb 18, 2026