CVE-2016-0947: Undefined Security Weakness

Untrusted search path vulnerability in Adobe Download Manager, as used in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X, allows local users to gain privileges...

CVE-2016-0933: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

CVE-2016-0939: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service uninitialized pointer dereference and...

CVE-2016-0941: Undefined Security Weakness

Use-after-free vulnerability in the Search object implementation in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code v...

CVE-2016-0931: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted...

Adobe Reader < 15.006.30119 / 15.010.20056 Multiple Vulnerabilities (APSB16-02)

The version of Adobe Reader installed on the remote Windows host is a version prior to 15.006.30119 or 15.010.20056. It is, therefore, affected by multiple vulnerabilities. - Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acroba...

CVE-2016-0935: Undefined Security Weakness

Double free vulnerability in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code via a crafted ExtGState dictionary...

Adobe Reader < 11.0.14 / 15.006.30119 / 15.010.20056 Multiple Vulnerabilities (APSB16-02) (Mac OS X)

The version of Adobe Reader installed on the remote Mac OS X host is a version prior to 11.0.14, 15.006.30119, or 15.010.20056. It is, therefore, affected by multiple vulnerabilities : - Multiple use-after-free errors exist that allow a remote attacker to execute arbitrary code. CVE-2016-0932,...

Adobe Reader DC Global Javascript API Restriction Bypass Vulnerability

Adobe Reader is PDF document reading software. A security vulnerability exists in Adobe Reader's handling of constructed Global objects. By creating PDF documents with specific JS instructions, an attacker can exploit this vulnerability to execute arbitrary code in the context of the current...

Adobe Reader DC AGM Remote Code Execution Vulnerability (CNVD-2016-00227)

Adobe Reader is PDF document reading software. Adobe Reader has a security vulnerability within AGM.dll. The multi-layered construction of the PDF can be forced to hang pointers after the release is important to exploit. An attacker exploiting this vulnerability can execute arbitrary code in the...

Adobe Reader DC Remote Code Execution Vulnerability

Adobe Reader is PDF document reading software. A security vulnerability exists in the AcroForm plug-in for Adobe Reader DC. A constructed PDF file could allow Adobe Reader DC to read memory outside of allocated objects. An attacker can exploit this vulnerability to execute arbitrary code in the...

Adobe Reader Memory Error Remote Code Execution Vulnerability

Adobe Reader is PDF document reading software. Adobe Reader has a security vulnerability when handling malformed ExtGState dictionaries within PDF documents. It can lead to a double release. An attacker can exploit this vulnerability to execute arbitrary code in the context of the current process...

Adobe Reader JPEG2000 Out-of-Bounds Indexing Remote Code Execution Vulnerability

Adobe Reader is PDF document reading software. A security vulnerability exists in Adobe Reader's handling of PDFs with embedded JPEG2000 files. The vulnerability stems from a failure to ensure that an index is located in an allocated buffer. An attacker can exploit this vulnerability to execute...

Adobe Reader DC Uninitialized Memory Remote Code Execution Vulnerability

Adobe Reader is PDF document reading software. Adobe Reader has a security vulnerability in the handling of PDF files. The constructed PDF can cause uninitialized memory to be indirectly referenced. An attacker can exploit this vulnerability to execute arbitrary code in the context of the current...

January 2016 Adobe Reader, Acrobat Security Patches

Adobe today patched 17 vulnerabilities in Acrobat and Reader, all of which the vendor rated as critical and warn could allow an attacker to commandeer the underlying system. Adobe said desktop versions of Acrobat and Reader XI 11.0.13, for Windows and Macintosh, are affected, as are Acrobat and...

Adobe Reader DC Forms Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AcroForm...

Adobe Reader DC Global Javascript API Restrictions Bypass Vulnerability

This vulnerability allows remote attackers to bypass API restrictions on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Global...

Adobe Reader JPEG2000 Out-Of-Bounds Indexing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Adobe Reader Graphics State Parameter Dictionary Double Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

Adobe Reader DC AGM Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within AGM.dll. A...