PT-2016-1920

CVE-2016-1060

·

Published

2016-05-05

·

Updated

2016-12-01

Description by

CVSS 2.0
10
Critical
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Adobe Reader versions (affected versions not specified) Adobe Acrobat versions (affected versions not specified)
Description The issue is related to a use-after-free vulnerability in Adobe Reader and Adobe Acrobat. This vulnerability can be exploited by a remote attacker to execute arbitrary code. The vulnerability is associated with the use of memory after it has been freed.
Recommendations For Adobe Reader, update to a version that contains a fix for this issue. For Adobe Acrobat, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting access to PDF files from untrusted sources until a patch is available.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾