PT-2016-1921

CVE-2016-1059

·

Published

2016-05-05

·

Updated

2016-12-01

Description by

CVSS 2.0
10
Critical
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Adobe Reader versions (affected versions not specified) Adobe Acrobat versions (affected versions not specified)
Description The issue is related to a use-after-free vulnerability in Adobe Reader and Adobe Acrobat, which can be exploited by a remote attacker to execute arbitrary code. This vulnerability is associated with the misuse of memory after it has been freed.
Recommendations For Adobe Reader, update to a version that includes a fix for this issue. For Adobe Acrobat, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting the use of the ExtendScript ScriptProxy feature in Adobe Reader DC until a patch is available.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾