PT-2016-3116
CVE-2016-1091
·
Published
2016-10-06
·
Updated
2017-07-30
Description by
CVSS 3.1
10
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Adobe Reader versions (affected versions not specified)
Adobe Acrobat versions (affected versions not specified)
Adobe Acrobat Document Cloud versions (affected versions not specified)
Adobe Reader Document Cloud versions (affected versions not specified)
Description
The issue is related to a use-after-free vulnerability in Adobe Reader and Acrobat, which can be exploited by a remote attacker to execute arbitrary code. This vulnerability is associated with the improper use of memory after it has been freed.
Recommendations
For Adobe Reader, update to a version that includes a fix for this issue.
For Adobe Acrobat, update to a version that includes a fix for this issue.
For Adobe Acrobat Document Cloud, update to a version that includes a fix for this issue.
For Adobe Reader Document Cloud, update to a version that includes a fix for this issue.
As a temporary workaround, consider restricting access to PDF files from untrusted sources until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾