CVE-2016-4255

published 2016-07-13

CVE-2016-4255: Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat…

high 8.8 CVSS 3.0

AV N AC L PR N UI R S U C H I H A H

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
adobe	acrobat	<= 11.0.16	—
adobe	acrobat_dc	<= 15.006.30174	—
adobe	acrobat_dc	<= 15.016.20045	—
adobe	acrobat_reader_dc	<= 15.006.30174	—
adobe	acrobat_reader_dc	<= 15.016.20045	—
adobe	reader	<= 11.0.16	—

CWE-416