CVE-2016-0943

Adobe Acrobat/Reader before 11.0.14, DC Classic before 15.006.30119, or DC Continuous before 15.010.20056 on Windows/macOS are affected by a flaw that mishandles the Global object, allowing bypass of JavaScript API execution restrictions via unspecified vectors. A remote attacker could exploit th...

CVE-2016-0944

Technical details for CVE-2016-0944 are not provided in the connected documents. The initial entry mentions affected Adobe products and memory corruption/remote code risk but lacks root cause, affected versions, or available fixes. Monitor for updates.

CVE-2016-0932

CVE-2016-0932 is a use-after-free vulnerability in the Doc object implementation of Adobe Reader and Acrobat. Affected products include Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20...

CVE-2016-0932

Use-after-free vulnerability in the Doc object implementation in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code via...

CVE-2016-0937

Use-after-free vulnerability in the OCG object implementation in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code via...

CVE-2016-0934

Adobe Acrobat/Reader on Windows and macOS is affected by CVE-2016-0934 due to a use-after-free in AGM.dll. The vulnerability impacts Acrobat/Reader before 11.0.14, and Acrobat/Reader DC Classic before 15.006.30119, and DC Continuous before 15.010.20056, enabling arbitrary code execution via a mal...

CVE-2016-0946

Technical details for CVE-2016-0946 are not publicly available in the provided documents. No concrete information on affected products, vectors, or fixes is present; monitor for updates.

CVE-2016-0941

CVE-2016-0941 is a use-after-free vulnerability in the Search object implementation of Adobe Reader and Acrobat and related products. Affected versions include Adobe Reader/Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat/Reader DC Continuous before 1...

CVE-2016-0938

The CVE-2016-0938 entry concerns the Acrobat/Reader AcroForm plugin affecting Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat/Reader DC Continuous before 15.010.20056 on Windows and OS X. The vulnerability allows attackers to execute...

CVE-2016-0945

Technical details for CVE-2016-0945 are not publicly provided in the connected documents. Monitor for updates from Adobe advisories and security bulletins.

CVE-2016-0935

Double free vulnerability in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code via a crafted ExtGState dictionary...

CVE-2016-0935

CVE-2016-0935 is a double-free vulnerability in Adobe Reader and Acrobat allowing remote code execution via a crafted ExtGState dictionary. Affected products include Adobe Reader and Acrobat before 11.0.14, Acrobat/Reader DC Classic before 15.006.30119, and Acrobat/Reader DC Continuous before 15....

Adobe Reader < 11.0.14 / 15.006.30119 / 15.010.20056 Multiple Vulnerabilities (APSB16-02) (Mac OS X)

The version of Adobe Reader installed on the remote Mac OS X host is a version prior to 11.0.14, 15.006.30119, or 15.010.20056. It is, therefore, affected by multiple vulnerabilities : - Multiple use-after-free errors exist that allow a remote attacker to execute arbitrary code. CVE-2016-0932,...

Adobe Reader < 15.006.30119 / 15.010.20056 Multiple Vulnerabilities (APSB16-02)

The version of Adobe Reader installed on the remote Windows host is a version prior to 15.006.30119 or 15.010.20056. It is, therefore, affected by multiple vulnerabilities. - Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acroba...

Adobe Reader DC Global Javascript API Restriction Bypass Vulnerability

Adobe Reader is PDF document reading software. A security vulnerability exists in Adobe Reader's handling of constructed Global objects. By creating PDF documents with specific JS instructions, an attacker can exploit this vulnerability to execute arbitrary code in the context of the current...

Adobe Reader DC AGM Remote Code Execution Vulnerability (CNVD-2016-00227)

Adobe Reader is PDF document reading software. Adobe Reader has a security vulnerability within AGM.dll. The multi-layered construction of the PDF can be forced to hang pointers after the release is important to exploit. An attacker exploiting this vulnerability can execute arbitrary code in the...

Adobe Reader Memory Error Remote Code Execution Vulnerability

Adobe Reader is PDF document reading software. Adobe Reader has a security vulnerability when handling malformed ExtGState dictionaries within PDF documents. It can lead to a double release. An attacker can exploit this vulnerability to execute arbitrary code in the context of the current process...

Adobe Reader DC Remote Code Execution Vulnerability

Adobe Reader is PDF document reading software. A security vulnerability exists in the AcroForm plug-in for Adobe Reader DC. A constructed PDF file could allow Adobe Reader DC to read memory outside of allocated objects. An attacker can exploit this vulnerability to execute arbitrary code in the...

Adobe Reader JPEG2000 Out-of-Bounds Indexing Remote Code Execution Vulnerability

Adobe Reader is PDF document reading software. A security vulnerability exists in Adobe Reader's handling of PDFs with embedded JPEG2000 files. The vulnerability stems from a failure to ensure that an index is located in an allocated buffer. An attacker can exploit this vulnerability to execute...

Adobe Reader DC Uninitialized Memory Remote Code Execution Vulnerability

Adobe Reader is PDF document reading software. Adobe Reader has a security vulnerability in the handling of PDF files. The constructed PDF can cause uninitialized memory to be indirectly referenced. An attacker can exploit this vulnerability to execute arbitrary code in the context of the current...