vendor:
Acrobat Reader DC
by:
Sébastien Morin
9,8
CVSS
CRITICAL
Remote Code Execution
119
CWE
Product Name: Acrobat Reader DC
Affected Version From: 15.016.20045
Affected Version To: 15.016.20045
Patch Exists: YES
Related CWE: CVE-2016-4201
CPE: a:adobe:acrobat_reader_dc
Metasploit:
https://www.rapid7.com/db/vulnerabilities/acrobat-cve-2016-6937/, https://www.rapid7.com/db/vulnerabilities/acrobat-cve-2016-4196/, https://www.rapid7.com/db/vulnerabilities/acrobat-cve-2016-4198/, https://www.rapid7.com/db/vulnerabilities/acrobat-cve-2016-4191/, https://www.rapid7.com/db/vulnerabilities/acrobat-cve-2016-4192/, https://www.rapid7.com/db/vulnerabilities/acrobat-cve-2016-4194/, https://www.rapid7.com/db/vulnerabilities/acrobat-cve-2016-4195/, https://www.rapid7.com/db/vulnerabilities/acrobat-cve-2016-4197/, https://www.rapid7.com/db/vulnerabilities/acrobat-cve-2016-4200/, https://www.rapid7.com/db/vulnerabilities/acrobat-cve-2016-4202/, https://www.rapid7.com/db/vulnerabilities/acrobat-cve-2016-4203/, https://www.rapid7.com/db/vulnerabilities/acrobat-cve-2016-4205/, https://www.rapid7.com/db/vulnerabilities/acrobat-cve-2016-4207/, https://www.rapid7.com/db/vulnerabilities/acrobat-cve-2016-4208/, https://www.rapid7.com/db/vulnerabilities/acrobat-cve-2016-4252/, https://www.rapid7.com/db/vulnerabilities/acrobat-cve-2016-4265/, https://www.rapid7.com/db/vulnerabilities/acrobat-cve-2016-4267/, https://www.rapid7.com/db/vulnerabilities/acrobat-cve-2016-4270/, https://www.rapid7.com/db/vulnerabilities/acrobat-cve-2016-4250/, https://www.rapid7.com/db/vulnerabilities/acrobat-cve-2016-4193/, https://www.rapid7.com/db/?q=CVE-2016-4201&type=&page=2, https://www.rapid7.com/db/?q=CVE-2016-4201&type=&page=2
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows, OSX
2016
Adobe Acrobat Reader DC Vulnerability
The vulnerability allows a remote attacker to execute malicious code or access to part of dynamically allocated memory using a user interaction that opens a specially crafted PDF file containing an invalid font (.ttf ) including invalid data.
Mitigation:
Adobe fixed the issue (APSB16-26)
