Details of VAR-201608-0295

ID

VAR-201608-0295

CVE

CVE-2016-4266

TITLE

Windows and Mac OS X Run on Adobe Reader and Acrobat Vulnerable to arbitrary code execution

Trust: 0.8

sources: JVNDB: JVNDB-2016-004465

DESCRIPTION

Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4191, CVE-2016-4192, CVE-2016-4193, CVE-2016-4194, CVE-2016-4195, CVE-2016-4196, CVE-2016-4197, CVE-2016-4198, CVE-2016-4199, CVE-2016-4200, CVE-2016-4201, CVE-2016-4202, CVE-2016-4203, CVE-2016-4204, CVE-2016-4205, CVE-2016-4206, CVE-2016-4207, CVE-2016-4208, CVE-2016-4211, CVE-2016-4212, CVE-2016-4213, CVE-2016-4214, CVE-2016-4250, CVE-2016-4251, CVE-2016-4252, CVE-2016-4254, CVE-2016-4265, CVE-2016-4267, CVE-2016-4268, CVE-2016-4269, and CVE-2016-4270. This vulnerability CVE-2016-4191 , CVE-2016-4192 , CVE-2016-4193 , CVE-2016-4194 , CVE-2016-4195 , CVE-2016-4196 , CVE-2016-4197 , CVE-2016-4198 , CVE-2016-4199 , CVE-2016-4200 , CVE-2016-4201 , CVE-2016-4202 , CVE-2016-4203 , CVE-2016-4204 , CVE-2016-4205 , CVE-2016-4206 , CVE-2016-4207 , CVE-2016-4208 , CVE-2016-4211 , CVE-2016-4212 , CVE-2016-4213 , CVE-2016-4214 , CVE-2016-4250 , CVE-2016-4251 , CVE-2016-4252 , CVE-2016-4254 , CVE-2016-4265 , CVE-2016-4267 , CVE-2016-4268 , CVE-2016-4269 ,and CVE-2016-4270 Is a different vulnerability.An attacker could execute arbitrary code or cause a denial of service ( Memory corruption ) There is a possibility of being put into a state. This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the handling of FlateDecode streams. A crafted FlateDecode stream can trigger a read past the end of an allocated buffer. Adobe Reader and Acrobat are prone to an memory-corruption vulnerability. Failed attacks may cause a denial-of-service condition. are all products of Adobe (Adobe) in the United States. Adobe Reader is a free PDF file reader; Acrobat is a PDF file editing and conversion tool; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF. Security flaws exist in several Adobe products

Trust: 2.61

sources: NVD: CVE-2016-4266 // JVNDB: JVNDB-2016-004465 // ZDI: ZDI-16-489 // BID: 92636 // VULHUB: VHN-93085

AFFECTED PRODUCTS

vendor:	adobe	model:	acrobat	scope:	lte	version:	11.0.16	Trust: 1.0
vendor:	adobe	model:	reader	scope:	lte	version:	11.0.16	Trust: 1.0
vendor:	adobe	model:	acrobat reader dc	scope:	lte	version:	15.016.20045	Trust: 1.0
vendor:	adobe	model:	acrobat reader dc	scope:	lte	version:	15.006.30174	Trust: 1.0
vendor:	adobe	model:	acrobat dc	scope:	lte	version:	15.006.30174	Trust: 1.0
vendor:	adobe	model:	acrobat dc	scope:	lte	version:	15.016.20045	Trust: 1.0
vendor:	adobe	model:	acrobat	scope:	lt	version:	xi desktop 11.0.17 (windows/macintosh)	Trust: 0.8
vendor:	adobe	model:	acrobat dc	scope:	lt	version:	classic 15.006.30198 (windows/macintosh)	Trust: 0.8
vendor:	adobe	model:	acrobat dc	scope:	lt	version:	continuous track 15.017.20050 (windows/macintosh)	Trust: 0.8
vendor:	adobe	model:	acrobat reader dc	scope:	lt	version:	classic 15.006.30198 (windows/macintosh)	Trust: 0.8
vendor:	adobe	model:	acrobat reader dc	scope:	lt	version:	continuous track 15.017.20050 (windows/macintosh)	Trust: 0.8
vendor:	adobe	model:	reader	scope:	lt	version:	xi desktop 11.0.17 (windows/macintosh)	Trust: 0.8
vendor:	adobe	model:	acrobat reader dc	scope:	-	version:	-	Trust: 0.7
vendor:	apple	model:	mac os x	scope:	-	version:	-	Trust: 0.6
vendor:	adobe	model:	acrobat	scope:	eq	version:	7.0.1	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	9.5.2	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	7.0.6	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	8	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	8.0	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	9.5.4	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	5.0.10	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	4.05	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	10.1.14	Trust: 0.3
vendor:	adobe	model:	acrobat reader dc	scope:	eq	version:	15.6.30172	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	10.1.9	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	9.2	Trust: 0.3
vendor:	adobe	model:	acrobat reader dc	scope:	eq	version:	15.6.30121	Trust: 0.3
vendor:	adobe	model:	acrobat reader dc	scope:	eq	version:	15.006.30119	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	9.4.2	Trust: 0.3
vendor:	adobe	model:	acrobat reader dc	scope:	eq	version:	15.16.20039	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	10.1.1	Trust: 0.3
vendor:	adobe	model:	acrobat reader dc	scope:	ne	version:	15.17.20050	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	9.3.3	Trust: 0.3
vendor:	adobe	model:	acrobat reader	scope:	eq	version:	11.0	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	7.1.3	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	10.1.13	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.14	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.10	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	10.0	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	3.02	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	9.4.1	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	9.3.4	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	6.0.2	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.16	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	8.2.3	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	9.4.3	Trust: 0.3
vendor:	adobe	model:	acrobat reader	scope:	eq	version:	10.1.1	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	4.0	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	7.0	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	8.3	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	10.1.2	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	8.2.4	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	10.1.15	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	7.0.1	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	10.0.3	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	10.1.10	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	8	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	8.0	Trust: 0.3
vendor:	adobe	model:	acrobat dc	scope:	eq	version:	15.9.20077	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	5.0.11	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	9.1.2	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0.3	Trust: 0.3
vendor:	adobe	model:	acrobat dc	scope:	eq	version:	15.6.30097	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	6.0	Trust: 0.3
vendor:	adobe	model:	acrobat reader dc	scope:	eq	version:	15.6.30174	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	10.0.13	Trust: 0.3
vendor:	adobe	model:	acrobat reader	scope:	eq	version:	10.1.2	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.6	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	7.0.3	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	8.1.5	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	9	Trust: 0.3
vendor:	adobe	model:	acrobat dc	scope:	eq	version:	15.10.20059	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	8.2.5	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	8.2.2	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0.10	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0.4	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0.14	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	8.2.6	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	10.1.3	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	3.0	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	9.0	Trust: 0.3
vendor:	adobe	model:	acrobat reader dc	scope:	eq	version:	15.6.30097	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0.16	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	8.2.3	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	9.4.3	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	7.0.8	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	9.3	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	9.4.6	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	10.0.2	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	9.4.4	Trust: 0.3
vendor:	adobe	model:	acrobat reader dc	scope:	eq	version:	15.10.20059	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	8.2.4	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	10.0.1	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	5.0.5	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	8.2	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	9.5	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	3.1	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	8.1.8	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	9.3.2	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	8.1.2	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	9.4.5	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	9.5.1	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	5.0	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	9.4	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	7.0.2	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0.11	Trust: 0.3
vendor:	adobe	model:	acrobat dc	scope:	eq	version:	15.16.20045	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	6.0.3	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	10.1.4	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	10.1.6	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	8.1.3	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	7.0.3	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	9.5.5	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	9.1.1	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	10.1.11	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	8.2.5	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	10.1.14	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.7	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	6.0.4	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	7.1.4	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.13	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	8.2.2	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	5.0.9	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	10.1.3	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	3.0	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	9.4.2	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	9.5.3	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	10.1.1	Trust: 0.3
vendor:	adobe	model:	acrobat reader dc	scope:	eq	version:	15.16.20045	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	10.1	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	4.5	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	7.1.2	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	10.1.16	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	10.0.2	Trust: 0.3
vendor:	adobe	model:	acrobat reader dc	scope:	eq	version:	15.9.20077	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	10.1.5	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	9.4.4	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	10.0	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	9.5	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	5.0.6	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	6.0.5	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	10.1.12	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.1	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	9.4.5	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	7.0.4	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	5.0	Trust: 0.3
vendor:	adobe	model:	acrobat reader	scope:	eq	version:	10.1	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	9.4	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	10.1.2	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	8.1.4	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	10.1.13	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	6.0.3	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	5.1	Trust: 0.3
vendor:	adobe	model:	acrobat dc	scope:	ne	version:	15.6.30198	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	10.1.4	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	8.1	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	10.1.8	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	9.1.1	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	9.4.1	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	10.1.11	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	10.0.3	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.2	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.15	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.12	Trust: 0.3
vendor:	adobe	model:	acrobat dc	scope:	eq	version:	15.010.20056	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.9	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0.7	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	6.0.4	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	8.3.1	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0.13	Trust: 0.3
vendor:	adobe	model:	acrobat reader	scope:	eq	version:	10.1.12	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	7.0	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.08	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	6.0	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	9.1	Trust: 0.3
vendor:	adobe	model:	acrobat dc	scope:	ne	version:	15.17.20050	Trust: 0.3
vendor:	adobe	model:	acrobat reader	scope:	eq	version:	10.1.13	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0.6	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0.05	Trust: 0.3
vendor:	adobe	model:	acrobat reader dc	scope:	ne	version:	15.6.30198	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	ne	version:	11.0.17	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	10.1.10	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	7.0.7	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	10.1	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.09	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	7.1.2	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	6.0.1	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	8.2.1	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	8.1.7	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	10.1.16	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.3	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	7.0.9	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	8.2.6	Trust: 0.3
vendor:	adobe	model:	acrobat reader dc	scope:	eq	version:	15.010.20056	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	9.5.2	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	9.4.7	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	10.1.12	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	6.0.5	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	5.0.10	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	9.3.1	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0.1	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	9.3	Trust: 0.3
vendor:	adobe	model:	acrobat reader	scope:	eq	version:	10.1.10	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	4.05	Trust: 0.3
vendor:	adobe	model:	acrobat dc	scope:	eq	version:	15.10.20060	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	5.1	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.4	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	10.1.9	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	9.2	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	3.01	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	9.1.3	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	8.1.6	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	7.1.1	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0.12	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0.15	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0.08	Trust: 0.3
vendor:	adobe	model:	acrobat dc	scope:	eq	version:	15.6.30174	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	9.3.3	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	7.0.5	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	7.1	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	9.4.6	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	10.1.7	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	10.0.1	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	8.1.1	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	5.0.5	Trust: 0.3
vendor:	adobe	model:	acrobat dc	scope:	eq	version:	15.6.30172	Trust: 0.3
vendor:	adobe	model:	acrobat reader dc	scope:	eq	version:	15.10.20060	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	6.0.2	Trust: 0.3
vendor:	adobe	model:	reader	scope:	ne	version:	11.0.17	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	9.3.2	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	4.0	Trust: 0.3
vendor:	adobe	model:	acrobat dc	scope:	eq	version:	15.6.30121	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	5.0.7	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0.09	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	6.0.1	Trust: 0.3
vendor:	adobe	model:	acrobat dc	scope:	eq	version:	15.006.30119	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	9.5.1	Trust: 0.3
vendor:	adobe	model:	acrobat dc	scope:	eq	version:	15.16.20039	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	7.0.2	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.11	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	8.3	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	7.0.9	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	10.1.15	Trust: 0.3

sources: ZDI: ZDI-16-489 // BID: 92636 // JVNDB: JVNDB-2016-004465 // CNNVD: CNNVD-201608-476 // NVD: CVE-2016-4266

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2016-4266
value:	CRITICAL
Trust: 1.0
NVD:	CVE-2016-4266
value:	CRITICAL
Trust: 0.8
ZDI:	CVE-2016-4266
value:	MEDIUM
Trust: 0.7
CNNVD:	CNNVD-201608-476
value:	CRITICAL
Trust: 0.6
VULHUB:	VHN-93085
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2016-4266
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
ZDI:	CVE-2016-4266
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:N/AC:M/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.7
VULHUB:	VHN-93085
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2016-4266
baseSeverity:	CRITICAL
baseScore:	9.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	5.9
version:	3.0
Trust: 1.8

sources: ZDI: ZDI-16-489 // VULHUB: VHN-93085 // JVNDB: JVNDB-2016-004465 // CNNVD: CNNVD-201608-476 // NVD: CVE-2016-4266

PROBLEMTYPE DATA

problemtype:

CWE-119

Trust: 1.9

sources: VULHUB: VHN-93085 // JVNDB: JVNDB-2016-004465 // NVD: CVE-2016-4266

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201608-476

TYPE

buffer overflow

Trust: 0.6

sources: CNNVD: CNNVD-201608-476

CONFIGURATIONS

sources: JVNDB: JVNDB-2016-004465

PATCH

title:	APSB16-26	url:	https://helpx.adobe.com/security/products/acrobat/apsb16-26.html	Trust: 1.5
title:	APSB16-26	url:	https://helpx.adobe.com/jp/security/products/acrobat/apsb16-26.html	Trust: 0.8
title:	アドビシステムズ社 Adobe Reader の脆弱性に関するお知らせ	url:	http://www.fmworld.net/biz/common/adobe/20160714.html	Trust: 0.8
title:	Multiple Adobe Product security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=63795	Trust: 0.6

sources: ZDI: ZDI-16-489 // JVNDB: JVNDB-2016-004465 // CNNVD: CNNVD-201608-476

EXTERNAL IDS

db:	NVD	id:	CVE-2016-4266	Trust: 3.5
db:	ZDI	id:	ZDI-16-489	Trust: 2.1
db:	BID	id:	92636	Trust: 2.0
db:	JVNDB	id:	JVNDB-2016-004465	Trust: 0.8
db:	ZDI_CAN	id:	ZDI-CAN-3835	Trust: 0.7
db:	CNNVD	id:	CNNVD-201608-476	Trust: 0.7
db:	VULHUB	id:	VHN-93085	Trust: 0.1

sources: ZDI: ZDI-16-489 // VULHUB: VHN-93085 // BID: 92636 // JVNDB: JVNDB-2016-004465 // CNNVD: CNNVD-201608-476 // NVD: CVE-2016-4266

REFERENCES

url:	https://helpx.adobe.com/security/products/acrobat/apsb16-26.html	Trust: 2.7
url:	http://www.securityfocus.com/bid/92636	Trust: 1.7
url:	http://www.zerodayinitiative.com/advisories/zdi-16-489	Trust: 1.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-4266	Trust: 0.8
url:	http://www.ipa.go.jp/security/ciadr/vul/20160713-adobereader.html	Trust: 0.8
url:	http://www.jpcert.or.jp/at/2016/at160030.html	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-4266	Trust: 0.8
url:	http://www.npa.go.jp/cyberpolice/topics/?seq=18716	Trust: 0.8
url:	http://www.adobe.com/products/acrobat/	Trust: 0.3
url:	http://www.adobe.com/products/reader/	Trust: 0.3
url:	http://www.zerodayinitiative.com/advisories/zdi-16-489/	Trust: 0.3

sources: ZDI: ZDI-16-489 // VULHUB: VHN-93085 // BID: 92636 // JVNDB: JVNDB-2016-004465 // CNNVD: CNNVD-201608-476 // NVD: CVE-2016-4266

CREDITS

Steven Seeley of Source Incite

Trust: 1.6

sources: ZDI: ZDI-16-489 // BID: 92636 // CNNVD: CNNVD-201608-476

SOURCES

db:	ZDI	id:	ZDI-16-489
db:	VULHUB	id:	VHN-93085
db:	BID	id:	92636
db:	JVNDB	id:	JVNDB-2016-004465
db:	CNNVD	id:	CNNVD-201608-476
db:	NVD	id:	CVE-2016-4266

LAST UPDATE DATE

2024-11-23T22:52:39.527000+00:00

SOURCES UPDATE DATE

db:	ZDI	id:	ZDI-16-489	date:	2016-08-24T00:00:00
db:	VULHUB	id:	VHN-93085	date:	2016-11-28T00:00:00
db:	BID	id:	92636	date:	2016-08-23T00:00:00
db:	JVNDB	id:	JVNDB-2016-004465	date:	2016-08-30T00:00:00
db:	CNNVD	id:	CNNVD-201608-476	date:	2016-08-29T00:00:00
db:	NVD	id:	CVE-2016-4266	date:	2024-11-21T02:51:45.690

SOURCES RELEASE DATE

db:	ZDI	id:	ZDI-16-489	date:	2016-08-24T00:00:00
db:	VULHUB	id:	VHN-93085	date:	2016-08-26T00:00:00
db:	BID	id:	92636	date:	2016-08-23T00:00:00
db:	JVNDB	id:	JVNDB-2016-004465	date:	2016-08-30T00:00:00
db:	CNNVD	id:	CNNVD-201608-476	date:	2016-08-26T00:00:00
db:	NVD	id:	CVE-2016-4266	date:	2016-08-26T19:59:02.600