high8.8
CVE-2016-0943
Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.…
Impact
Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X mishandle the Global object, which allows attackers to bypass JavaScript API execution restrictions via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Acrobat Dc | through 15.006.30097 through 15.009.20077 |
| Adobe | Acrobat Reader Dc | through 15.006.30097 through 15.009.20077 |
| Adobe | Acrobat Reader | through 11.0.13 Versions 11.0.0, 11.0.1, 11.0.2, 11.0.3, 11.0.4 |
| Adobe | Acrobat | through 11.0.13 Versions 11.0.0, 11.0.1, 11.0.2, 11.0.3, 11.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securitytracker.com/id/1034646
- http://zerodayinitiative.com/advisories/ZDI-16-012
- https://helpx.adobe.com/security/products/acrobat/apsb16-02.html
- http://www.securitytracker.com/id/1034646
- http://zerodayinitiative.com/advisories/ZDI-16-012
- https://helpx.adobe.com/security/products/acrobat/apsb16-02.html