CVE Catalog

CVE-2016-4091

Critical
Published: Translated: NVD NIST

Summary

Heap-based buffer overflow in Adobe Reader and Acrobat before 11.0.16, and in Acrobat and Acrobat Reader DC Classic before 15.006.30172 and DC Continuous before 15.016.20039 allows attackers to execute arbitrary code.

Risk Assessment

This vulnerability poses a serious risk to organizations, allowing attackers to remotely execute code, potentially leading to data loss or system takeover.

Recommendation

It is recommended to update Adobe Reader and Acrobat to the latest versions to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

Heap-based buffer overflow in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4092.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS