CVE-2016-4210
CRITICALAdobe Reader/Acrobat <11.0.17, <15.006.30198, <15.017.20050 - RCE
Title source: llmDescription
Integer overflow in Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1036281
Patch, Vendor Advisory x_refsource_confirm
https://helpx.adobe.com/security/products/acrobat/apsb16-26.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/91710
Scores
CVSS v3
9.8
EPSS
0.0598
EPSS Percentile
92.4%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-119
Status
published
Products (6)
adobe/acrobat
< 11.0.16
adobe/acrobat_dc
< 15.006.30174
adobe/acrobat_dc
< 15.016.20045
adobe/acrobat_reader_dc
< 15.006.30174
adobe/acrobat_reader_dc
< 15.016.20045
adobe/reader
< 11.0.16
Published
Jul 13, 2016
Tracked Since
Feb 18, 2026