CVEvulnerability
CVE-2016-4209
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2016-07-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Heap-based buffer overflow in Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.
Affected configurations
• adobe acrobat (<= 11.0.16)
• adobe acrobat dc (<= 15.006.30174)
• adobe acrobat dc (<= 15.016.20045)
• adobe acrobat reader dc (<= 15.006.30174)
• adobe acrobat reader dc (<= 15.016.20045)
• adobe reader (<= 11.0.16)
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://www.securityfocus.com/bid/91711 www.securityfocus.com
- http://www.securitytracker.com/id/1036281 www.securitytracker.com
- https://helpx.adobe.com/security/products/acrobat/apsb16-26.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/91711 www.securityfocus.com
- http://www.securitytracker.com/id/1036281 www.securitytracker.com
- https://helpx.adobe.com/security/products/acrobat/apsb16-26.html Patch, Vendor Advisory