CVEvulnerability
CVE-2016-1043
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2016-05-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Integer overflow in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.
Affected configurations
• adobe acrobat (<= 11.0.15)
• adobe acrobat dc (<= 15.006.30121)
• adobe acrobat dc (<= 15.010.20060)
• adobe acrobat reader dc (<= 15.006.30121)
• adobe acrobat reader dc (<= 15.010.20060)
• adobe reader (<= 11.0.15)
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://www.securityfocus.com/bid/90516 www.securityfocus.com
- http://www.securitytracker.com/id/1035828 www.securitytracker.com
- http://www.zerodayinitiative.com/advisories/ZDI-16-286 www.zerodayinitiative.com
- https://helpx.adobe.com/security/products/acrobat/apsb16-14.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/90516 www.securityfocus.com
- http://www.securitytracker.com/id/1035828 www.securitytracker.com
- http://www.zerodayinitiative.com/advisories/ZDI-16-286 www.zerodayinitiative.com
- https://helpx.adobe.com/security/products/acrobat/apsb16-14.html Patch, Vendor Advisory