CVE-2016-0941
published 2016-01-14CVE-2016-0941: Use-after-free vulnerability in the Search object implementation in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before…
PriorityP348high8.8CVSS 3.0
AVNACLPRNUIRSUCHIHAH
EPSS
6.80%
94.0th percentile
Use-after-free vulnerability in the Search object implementation in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0932, CVE-2016-0934, CVE-2016-0937, and CVE-2016-0940.
Affected
32 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | acrobat | <= 11.0.13 | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat_dc | <= 15.006.30097 | — |
| adobe | acrobat_dc | <= 15.009.20077 | — |
| adobe | acrobat_reader | <= 11.0.13 | — |
| adobe | acrobat_reader | — | — |
| adobe | acrobat_reader | — | — |
| adobe | acrobat_reader | — | — |
| adobe | acrobat_reader | — | — |
| adobe | acrobat_reader | — | — |
| adobe | acrobat_reader | — | — |
| adobe | acrobat_reader | — | — |
| adobe | acrobat_reader | — | — |
CVSS provenance
nvdv3.08.8HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-f5c2-rx2m-x7qg: Use-after-free vulnerability in the Search object implementation in Adobe Reader and Acrobat before 11
ghsa_unreviewed·2022-05-17·CVSS 8.8
CVE-2016-0941 [HIGH] GHSA-f5c2-rx2m-x7qg: Use-after-free vulnerability in the Search object implementation in Adobe Reader and Acrobat before 11
Use-after-free vulnerability in the Search object implementation in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0932, CVE-2016-0934, CVE-2016-0937, and CVE-2016-0940.
GHSA
GHSA-fg4m-3vxx-22qr: Use-after-free vulnerability in Adobe Reader and Acrobat before 11
ghsa_unreviewed·2022-05-17·CVSS 8.8
CVE-2016-0940 [HIGH] GHSA-fg4m-3vxx-22qr: Use-after-free vulnerability in Adobe Reader and Acrobat before 11
Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0932, CVE-2016-0934, CVE-2016-0937, and CVE-2016-0941.
GHSA
GHSA-p789-xgx3-wp3h: Use-after-free vulnerability in the OCG object implementation in Adobe Reader and Acrobat before 11
ghsa_unreviewed·2022-05-17·CVSS 8.8
CVE-2016-0937 [HIGH] GHSA-p789-xgx3-wp3h: Use-after-free vulnerability in the OCG object implementation in Adobe Reader and Acrobat before 11
Use-after-free vulnerability in the OCG object implementation in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0932, CVE-2016-0934, CVE-2016-0940, and CVE-2016-0941.
GHSA
GHSA-pxwh-wx9r-w948: Use-after-free vulnerability in AGM
ghsa_unreviewed·2022-05-17·CVSS 8.8
CVE-2016-0934 [HIGH] GHSA-pxwh-wx9r-w948: Use-after-free vulnerability in AGM
Use-after-free vulnerability in AGM.dll in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code via a multiple-layer PDF document, a different vulnerability than CVE-2016-0932, CVE-2016-0937, CVE-2016-0940, and CVE-2016-0941.
GHSA
GHSA-fcrv-wg5q-8xmq: Use-after-free vulnerability in the Doc object implementation in Adobe Reader and Acrobat before 11
ghsa_unreviewed·2022-05-17·CVSS 8.8
CVE-2016-0932 [HIGH] GHSA-fcrv-wg5q-8xmq: Use-after-free vulnerability in the Doc object implementation in Adobe Reader and Acrobat before 11
Use-after-free vulnerability in the Doc object implementation in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0934, CVE-2016-0937, CVE-2016-0940, and CVE-2016-0941.
No detection rules found.
No public exploits indexed.
http://www.securitytracker.com/id/1034646http://zerodayinitiative.com/advisories/ZDI-16-010https://helpx.adobe.com/security/products/acrobat/apsb16-02.htmlhttp://www.securitytracker.com/id/1034646http://zerodayinitiative.com/advisories/ZDI-16-010https://helpx.adobe.com/security/products/acrobat/apsb16-02.html
2016-01-14
Published