Multiple vulnerabilities in Adobe Acrobat

Description

Multiple serious vulnerabilities have been found in Adobe Acrobat. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions or obtain sensitive information.

Below is a complete list of vulnerabilities

1. Multiple use-after-free, heap buffer overflow, integer overflow and memory corruption vulnerabilities can be exploited to execute arbitrary code;
2. Memory leak vulnerability can be potentially exploited to cause denial of service;
3. An unknown vulnerability can be exploited remotely to obtain sensitive information;
4. An unknown vulnerabilities can be exploited to bypass Javascript API restrictions;
5. An insecure search path while updates resolve can be exploited to execute arbitrary code;
6. Memory corruption vulnerability can be exploited remotely to cause denial of service.

Original advisories

• Adobe security bulletin

Exploitation

Public exploits exist for this vulnerability.

Related products

• Adobe-Reader-XI
• Adobe-Acrobat-Reader-DC-Continuous
• Adobe-Acrobat-Reader-DC-Classic
• Adobe-Acrobat-DC-Continuous
• Adobe-Acrobat-DC-Classic

CVE list

• CVE-2016-1037
  critical
• CVE-2016-1038
  critical
• CVE-2016-1039
  critical
• CVE-2016-1040
  critical
• CVE-2016-1041
  critical
• CVE-2016-1042
  critical
• CVE-2016-1043
  critical
• CVE-2016-1044
  critical
• CVE-2016-1045
  critical
• CVE-2016-1046
  critical
• CVE-2016-1047
  critical
• CVE-2016-1048
  critical
• CVE-2016-1049
  critical
• CVE-2016-1050
  critical
• CVE-2016-1051
  critical
• CVE-2016-1052
  critical
• CVE-2016-1053
  critical
• CVE-2016-1054
  critical
• CVE-2016-1055
  critical
• CVE-2016-1056
  critical
• CVE-2016-1057
  critical
• CVE-2016-1058
  critical
• CVE-2016-1059
  critical
• CVE-2016-1060
  critical
• CVE-2016-1061
  critical
• CVE-2016-1062
  critical
• CVE-2016-1063
  critical
• CVE-2016-1064
  critical
• CVE-2016-1065
  critical
• CVE-2016-1066
  critical
• CVE-2016-1067
  critical
• CVE-2016-1068
  critical
• CVE-2016-1069
  critical
• CVE-2016-1070
  critical
• CVE-2016-1071
  critical
• CVE-2016-1072
  critical
• CVE-2016-1073
  critical
• CVE-2016-1074
  critical
• CVE-2016-1075
  critical
• CVE-2016-1076
  critical
• CVE-2016-1077
  critical
• CVE-2016-1078
  critical
• CVE-2016-1079
  warning
• CVE-2016-1080
  critical
• CVE-2016-1081
  critical
• CVE-2016-1082
  critical
• CVE-2016-1083
  critical
• CVE-2016-1084
  critical
• CVE-2016-1085
  critical
• CVE-2016-1086
  critical
• CVE-2016-1087
  high
• CVE-2016-1088
  critical
• CVE-2016-1090
  high
• CVE-2016-1092
  warning
• CVE-2016-1093
  critical
• CVE-2016-1094
  critical
• CVE-2016-1095
  critical
• CVE-2016-1112
  critical
• CVE-2016-1116
  critical
• CVE-2016-1117
  critical
• CVE-2016-1118
  critical
• CVE-2016-1119
  critical
• CVE-2016-1120
  critical
• CVE-2016-1121
  critical
• CVE-2016-1122
  critical
• CVE-2016-1123
  critical
• CVE-2016-1124
  critical
• CVE-2016-1125
  critical
• CVE-2016-1126
  critical
• CVE-2016-1127
  critical
• CVE-2016-1128
  critical
• CVE-2016-1129
  critical
• CVE-2016-1130
  critical
• CVE-2016-4088
  critical
• CVE-2016-4089
  critical
• CVE-2016-4090
  critical
• CVE-2016-4091
  critical
• CVE-2016-4092
  critical
• CVE-2016-4093
  critical
• CVE-2016-4094
  critical
• CVE-2016-4096
  critical
• CVE-2016-4097
  critical
• CVE-2016-4098
  critical
• CVE-2016-4099
  critical
• CVE-2016-4100
  critical
• CVE-2016-4101
  critical
• CVE-2016-4102
  critical
• CVE-2016-4103
  critical
• CVE-2016-4104
  critical
• CVE-2016-4105
  critical
• CVE-2016-4106
  high
• CVE-2016-4107
  critical
• CVE-2016-4119
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com