Vulnerability Description
Heap-based buffer overflow in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4091.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Mac Os X | All versions |
| Microsoft | Windows | All versions |
| Adobe | Acrobat | <= 11.0.15 |
| Adobe | Acrobat Dc | <= 15.006.30121 |
| Adobe | Acrobat Reader Dc | <= 15.006.30121 |
| Adobe | Reader | <= 11.0.15 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/90508Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1035828Third Party AdvisoryVDB Entry
- https://helpx.adobe.com/security/products/acrobat/apsb16-14.htmlPatchVendor Advisory
- http://www.securityfocus.com/bid/90508Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1035828Third Party AdvisoryVDB Entry
- https://helpx.adobe.com/security/products/acrobat/apsb16-14.htmlPatchVendor Advisory
FAQ
What is CVE-2016-4092?
CVE-2016-4092 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Heap-based buffer overflow in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Wi...
How severe is CVE-2016-4092?
CVE-2016-4092 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2016-4092?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Mac Os X, Microsoft Windows, Adobe Acrobat, Adobe Acrobat Dc, Adobe Acrobat Reader Dc.