Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FileAttachment annotation, a different vulnerability than CVE-2016-0933, CVE-2016-0936, CVE-2016-0938, CVE-2016-0939, CVE-2016-0942, CVE-2016-0944, CVE-2016-0945, and CVE-2016-0946.
References
| Link | Resource |
|---|---|
| http://www.securitytracker.com/id/1034646 | Third Party Advisory VDB Entry |
| http://zerodayinitiative.com/advisories/ZDI-16-009 | Third Party Advisory VDB Entry |
| https://helpx.adobe.com/security/products/acrobat/apsb16-02.html | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
History
No history.
Information
Published : 2016-01-14 05:59
Updated : 2016-12-07 23:43
NVD link : CVE-2016-0931
Mitre link : CVE-2016-0931
CVE.ORG link : CVE-2016-0931
JSON object : View
Products Affected
adobe
- acrobat_reader
- acrobat_reader_dc
- acrobat_dc
- acrobat
microsoft
- windows
apple
- mac_os_x
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer