Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2016-4203 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Adobe Acrobat

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer106 documents5 sources
Severity
9.8CRITICALNVD
NVD8.8
EPSS
24.0%
top 3.95%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
4
Adobe AcrobatAdobe Acrobat DCAdobe Acrobat Reader DC+1 more
Timeline
PublishedJul 13
Latest updateMay 17

Description

Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4191, CVE-2016-4192, CVE-2016-4193, CVE-2016-4194, CVE-2016-4195, CVE-2016-4196, CVE-2016-4197, CVE-2016-4198, CVE-2016-4199, CVE-2016-4200, CVE-2016-4201, CVE…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages4 packages

▶NVDadobe/acrobat_reader_dc15.006.30174+1
▶NVDadobe/acrobat11.0.16
▶NVDadobe/acrobat_dc15.006.30174+1
▶NVDadobe/reader11.0.16

Patches

Patch: helpx.adobe.com ↗Patch: helpx.adobe.com ↗

🔴Vulnerability Details

66
GHSA
GHSA-w992-gvqf-38pj: Adobe Reader and Acrobat before 11↗2022-05-17
▶
GHSA
GHSA-mrgp-vh6q-w8cm: Adobe Reader and Acrobat before 11↗2022-05-17
▶
GHSA
GHSA-mx4r-9cm4-39g5: Adobe Reader and Acrobat before 11↗2022-05-17
▶
GHSA
GHSA-98wg-wmrr-v6h8: Adobe Reader and Acrobat before 11↗2022-05-17
▶
GHSA
GHSA-h9w4-4rjr-c5g7: Adobe Reader and Acrobat before 11↗2022-05-17
▶

💥Exploits & PoCs

1
Exploit-DB
Adobe Acrobat Reader DC 15.016.20045 - Invalid Font '.ttf' Memory Corruption (3)↗2016-07-13
▶

🕵️Threat Intelligence

6
Fortinet
Tutorial of ARM Stack Overflow Exploit – Defeating ASLR with ret2plt | FortiGuard Labs↗2020-07-17
▶
Fortinet
Looking Back at Fortinet’s Security Research and Vulnerability Discoveries↗2017-02-21
▶
Fortinet
Analysis of OpenSSL ChaCha20-Poly1305 Heap Buffer Overflow (CVE-2016-7054)↗2016-11-23
▶
Fortinet
Fortinet Researchers Discover Two Critical Vulnerabilities in Adobe Acrobat and Reader↗2016-10-21
▶
Fortinet
Analysis of CVE-2016-4203 - Adobe Acrobat and Reader CoolType Handling Heap Overflow Vulnerability↗2016-07-20
▶
CVE-2016-4203 — Adobe Acrobat vulnerability | cvebase