Vulnerability Description
Heap-based buffer overflow in Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Mac Os X | All versions |
| Microsoft | Windows | All versions |
| Adobe | Acrobat | <= 11.0.16 |
| Adobe | Acrobat Dc | <= 15.006.30174 |
| Adobe | Acrobat Reader Dc | <= 15.006.30174 |
| Adobe | Reader | <= 11.0.16 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/91711
- http://www.securitytracker.com/id/1036281
- https://helpx.adobe.com/security/products/acrobat/apsb16-26.htmlPatchVendor Advisory
- http://www.securityfocus.com/bid/91711
- http://www.securitytracker.com/id/1036281
- https://helpx.adobe.com/security/products/acrobat/apsb16-26.htmlPatchVendor Advisory
FAQ
What is CVE-2016-4209?
CVE-2016-4209 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Heap-based buffer overflow in Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Wi...
How severe is CVE-2016-4209?
CVE-2016-4209 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2016-4209?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Mac Os X, Microsoft Windows, Adobe Acrobat, Adobe Acrobat Dc, Adobe Acrobat Reader Dc.