CVE-2016-1062

published 2016-05-11

CVE-2016-1062: Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before…

critical 9.8 CVSS 3.0

AV N AC L PR N UI N S U C H I H A H

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2016-1038, CVE-2016-1039, CVE-2016-1040, CVE-2016-1041, CVE-2016-1042, CVE-2016-1044, and CVE-2016-1117.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
adobe	acrobat	<= 11.0.15	—
adobe	acrobat_dc	<= 15.006.30121	—
adobe	acrobat_dc	<= 15.010.20060	—
adobe	acrobat_reader_dc	<= 15.006.30121	—
adobe	acrobat_reader_dc	<= 15.010.20060	—
adobe	reader	<= 11.0.15	—

CWE-284