CVE-2016-6938

published 2016-09-17

CVE-2016-6938: Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat…

critical 9.8 CVSS 3.0

AV N AC L PR N UI N S U C H I H A H

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4255.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
adobe	acrobat	<= 11.0.16	—
adobe	acrobat_dc	<= 15.006.30174	—
adobe	acrobat_dc	<= 15.016.20045	—
adobe	acrobat_reader_dc	<= 15.006.30174	—
adobe	acrobat_reader_dc	<= 15.016.20045	—
adobe	reader	<= 11.0.16	—

CWE-416