CVE-2016-4205 EXPLOIT
Patch early
A public exploit exists.
Description
Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4191, CVE-2016-4192, CVE-2016-4193, CVE-2016-4194, CVE-2016-4195, CVE-2016-4196, CVE-2016-4197, CVE-2016-4198, CVE-2016-4199, CVE-2016-4200, CVE-2016-4201, CVE-2016-4202, CVE-2016-4203, CVE-2016-4204, CVE-2016-4206, CVE-2016-4207, CVE-2016-4208, CVE-2016-4211, CVE-2016-4212, CVE-2016-4213, CVE-2016-4214, CVE-2016-4250, CVE-2016-4251, CVE-2016-4252, and CVE-2016-4254.
Scoring
| CVSS | 9.8 (CRITICAL, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 17.81% — more likely to be exploited than 97% of all CVEs |
| Weakness | CWE-119 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2016-07-13 |
| Last modified | 2026-06-17 |
Affected (6)
| Vendor | Product |
|---|---|
| adobe | acrobat |
| adobe | acrobat dc |
| adobe | acrobat reader dc |
| adobe | reader |
| apple | mac os x |
| microsoft | windows |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Adobe Acrobat Reader DC 15.016.20045 - Invalid Font '.ttf' Memory Corruption (1) | 2016-07-13 |
References
- http://www.securityfocus.com/bid/91716
- http://www.securitytracker.com/id/1036281
- https://helpx.adobe.com/security/products/acrobat/apsb16-26.html
- https://www.exploit-db.com/exploits/40095/
- http://www.securityfocus.com/bid/91716
- http://www.securitytracker.com/id/1036281
- https://helpx.adobe.com/security/products/acrobat/apsb16-26.html
- https://www.exploit-db.com/exploits/40095/
→ the Explorer · watch your stack · NVD