CVE-2016-6958
critical
CVSS v3
9.8
CVSS v2
10.0
VIR risk
9.8
Description
Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to bypass intended access restrictions via unspecified vectors.
Predictions
Exploit likelihood
97%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: psirt@adobe.com — https://helpx.adobe.com/security/products/acrobat/apsb16-33.html
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| macos | not-affected | |
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| adobe | acrobat | {"endIncluding":"11.0.17"} | |
| adobe | acrobat_dc | {"endIncluding":"15.006.30201"} | |
| adobe | acrobat_reader_dc | {"endIncluding":"15.006.30201"} | |
| adobe | reader | {"endIncluding":"11.0.17"} | |
References
CWEs
CWE-284
Verify integrity in audit chain (admin only). AS-IS.