Details of VAR-201607-0115

ID

VAR-201607-0115

CVE

CVE-2016-4200

TITLE

Windows and Mac OS X Run on Adobe Reader and Acrobat Vulnerable to arbitrary code execution

Trust: 0.8

sources: JVNDB: JVNDB-2016-003631

DESCRIPTION

Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4191, CVE-2016-4192, CVE-2016-4193, CVE-2016-4194, CVE-2016-4195, CVE-2016-4196, CVE-2016-4197, CVE-2016-4198, CVE-2016-4199, CVE-2016-4201, CVE-2016-4202, CVE-2016-4203, CVE-2016-4204, CVE-2016-4205, CVE-2016-4206, CVE-2016-4207, CVE-2016-4208, CVE-2016-4211, CVE-2016-4212, CVE-2016-4213, CVE-2016-4214, CVE-2016-4250, CVE-2016-4251, CVE-2016-4252, and CVE-2016-4254. This vulnerability CVE-2016-4191 , CVE-2016-4192 , CVE-2016-4193 , CVE-2016-4194 , CVE-2016-4195 , CVE-2016-4196 , CVE-2016-4197 , CVE-2016-4198 , CVE-2016-4199 , CVE-2016-4201 , CVE-2016-4202 , CVE-2016-4203 , CVE-2016-4204 , CVE-2016-4205 , CVE-2016-4206 , CVE-2016-4207 , CVE-2016-4208 , CVE-2016-4211 , CVE-2016-4212 , CVE-2016-4213 , CVE-2016-4214 , CVE-2016-4250 , CVE-2016-4251 , CVE-2016-4252 ,and CVE-2016-4254 Is a different vulnerability.An attacker could execute arbitrary code or cause a denial of service ( Memory corruption ) There is a possibility of being put into a state. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the handling of XPath expressions. A PDF document with a specific "copy-of" element and an XPath expression can force Adobe Reader DC to write values past the end of an allocated object. Failed attacks may cause a denial-of-service condition. Adobe Reader, etc. are all products of Adobe (Adobe) in the United States. Adobe Reader is a free PDF file reader; Acrobat is a PDF file editing and conversion tool; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF. Security flaws exist in several Adobe products

Trust: 2.61

sources: NVD: CVE-2016-4200 // JVNDB: JVNDB-2016-003631 // ZDI: ZDI-16-419 // BID: 91716 // VULHUB: VHN-93019

AFFECTED PRODUCTS

vendor:	adobe	model:	acrobat dc	scope:	lte	version:	15.006.30174	Trust: 1.0
vendor:	adobe	model:	acrobat dc	scope:	lte	version:	15.016.20045	Trust: 1.0
vendor:	adobe	model:	acrobat reader dc	scope:	lte	version:	15.016.20045	Trust: 1.0
vendor:	adobe	model:	acrobat reader dc	scope:	lte	version:	15.006.30174	Trust: 1.0
vendor:	adobe	model:	reader	scope:	lte	version:	11.0.16	Trust: 1.0
vendor:	adobe	model:	acrobat	scope:	lte	version:	11.0.16	Trust: 1.0
vendor:	adobe	model:	acrobat	scope:	lt	version:	xi desktop 11.0.17 (windows/macintosh)	Trust: 0.8
vendor:	adobe	model:	acrobat dc	scope:	lt	version:	classic 15.006.30198 (windows/macintosh)	Trust: 0.8
vendor:	adobe	model:	acrobat dc	scope:	lt	version:	continuous track 15.017.20050 (windows/macintosh)	Trust: 0.8
vendor:	adobe	model:	acrobat reader dc	scope:	lt	version:	classic 15.006.30198 (windows/macintosh)	Trust: 0.8
vendor:	adobe	model:	acrobat reader dc	scope:	lt	version:	continuous track 15.017.20050 (windows/macintosh)	Trust: 0.8
vendor:	adobe	model:	reader	scope:	lt	version:	xi desktop 11.0.17 (windows/macintosh)	Trust: 0.8
vendor:	adobe	model:	acrobat reader dc	scope:	-	version:	-	Trust: 0.7
vendor:	apple	model:	mac os x	scope:	-	version:	-	Trust: 0.6
vendor:	adobe	model:	acrobat reader dc	scope:	eq	version:	15.6.30174	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.13	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.6	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.09	Trust: 0.3
vendor:	adobe	model:	acrobat dc	scope:	eq	version:	15.6.30097	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.3	Trust: 0.3
vendor:	adobe	model:	acrobat reader dc	scope:	eq	version:	15.6.30172	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0	Trust: 0.3
vendor:	adobe	model:	acrobat reader dc	scope:	eq	version:	15.16.20045	Trust: 0.3
vendor:	adobe	model:	acrobat reader dc	scope:	eq	version:	15.010.20056	Trust: 0.3
vendor:	adobe	model:	acrobat dc	scope:	eq	version:	15.10.20059	Trust: 0.3
vendor:	adobe	model:	reader	scope:	ne	version:	11.0.17	Trust: 0.3
vendor:	adobe	model:	acrobat reader dc	scope:	eq	version:	15.6.30121	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0.10	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0.4	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0.14	Trust: 0.3
vendor:	adobe	model:	acrobat reader dc	scope:	eq	version:	15.006.30119	Trust: 0.3
vendor:	adobe	model:	acrobat reader dc	scope:	eq	version:	15.16.20039	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0.1	Trust: 0.3
vendor:	adobe	model:	acrobat reader dc	scope:	eq	version:	15.9.20077	Trust: 0.3
vendor:	adobe	model:	acrobat reader dc	scope:	ne	version:	15.17.20050	Trust: 0.3
vendor:	adobe	model:	acrobat dc	scope:	eq	version:	15.10.20060	Trust: 0.3
vendor:	adobe	model:	acrobat reader dc	scope:	eq	version:	15.6.30097	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0.16	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.4	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.10	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.14	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.1	Trust: 0.3
vendor:	adobe	model:	acrobat reader dc	scope:	eq	version:	15.10.20059	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0.12	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0.15	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0.08	Trust: 0.3
vendor:	adobe	model:	acrobat dc	scope:	eq	version:	15.6.30174	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.16	Trust: 0.3
vendor:	adobe	model:	acrobat dc	scope:	ne	version:	15.6.30198	Trust: 0.3
vendor:	adobe	model:	acrobat dc	scope:	eq	version:	15.6.30172	Trust: 0.3
vendor:	adobe	model:	acrobat reader dc	scope:	eq	version:	15.10.20060	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.2	Trust: 0.3
vendor:	adobe	model:	acrobat dc	scope:	eq	version:	15.16.20045	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0.11	Trust: 0.3
vendor:	adobe	model:	acrobat dc	scope:	eq	version:	15.010.20056	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0.7	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.9	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0.13	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.15	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.12	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.08	Trust: 0.3
vendor:	adobe	model:	acrobat dc	scope:	eq	version:	15.6.30121	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0.09	Trust: 0.3
vendor:	adobe	model:	acrobat dc	scope:	eq	version:	15.9.20077	Trust: 0.3
vendor:	adobe	model:	acrobat dc	scope:	eq	version:	15.006.30119	Trust: 0.3
vendor:	adobe	model:	acrobat dc	scope:	ne	version:	15.17.20050	Trust: 0.3
vendor:	adobe	model:	acrobat dc	scope:	eq	version:	15.16.20039	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0.6	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.11	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0.05	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0	Trust: 0.3
vendor:	adobe	model:	acrobat reader dc	scope:	ne	version:	15.6.30198	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	ne	version:	11.0.17	Trust: 0.3
vendor:	adobe	model:	reader	scope:	eq	version:	11.0.3	Trust: 0.3
vendor:	adobe	model:	acrobat	scope:	eq	version:	11.0.7	Trust: 0.3

sources: ZDI: ZDI-16-419 // BID: 91716 // JVNDB: JVNDB-2016-003631 // NVD: CVE-2016-4200 // CNNVD: CNNVD-201607-257

CVSS

SEVERITY

CVSSV2

CVSSV3

NVD:	CVE-2016-4200
value:	HIGH
Trust: 1.8
ZDI:	CVE-2016-4200
value:	MEDIUM
Trust: 0.7
CNNVD:	CNNVD-201607-257
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-93019
value:	MEDIUM
Trust: 0.1

NVD:	CVE-2016-4200
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	NONE
impactScore:	NONE
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.5
NVD:
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	8.6
impactScore:	6.4
acInsufInfo:	FALSE
obtainAllPrivilege:	FALSE
obtainUserPrivilege:	FALSE
obtainOtherPrivilege:	FALSE
userInteractionRequired:	TRUE
version:	2.0
Trust: 1.0
VULHUB:	VHN-93019
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	8.6
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

NVD:
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	2.8
impactScore:	5.9
version:	3.0
Trust: 1.0
NVD:	CVE-2016-4200
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: ZDI: ZDI-16-419 // VULHUB: VHN-93019 // JVNDB: JVNDB-2016-003631 // NVD: CVE-2016-4200 // CNNVD: CNNVD-201607-257

PROBLEMTYPE DATA

problemtype:

CWE-119

Trust: 1.9

sources: VULHUB: VHN-93019 // JVNDB: JVNDB-2016-003631 // NVD: CVE-2016-4200

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201607-257

TYPE

buffer overflow

Trust: 0.6

sources: CNNVD: CNNVD-201607-257

CONFIGURATIONS

sources: NVD: CVE-2016-4200

PATCH

title:	APSB16-26	url:	https://helpx.adobe.com/security/products/acrobat/apsb16-26.html	Trust: 1.5
title:	APSB16-26	url:	https://helpx.adobe.com/jp/security/products/acrobat/apsb16-26.html	Trust: 0.8
title:	アドビシステムズ社 Adobe Reader の脆弱性に関するお知らせ	url:	http://www.fmworld.net/biz/common/adobe/20160714.html	Trust: 0.8
title:	Multiple Adobe Product security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=62840	Trust: 0.6

sources: ZDI: ZDI-16-419 // JVNDB: JVNDB-2016-003631 // CNNVD: CNNVD-201607-257

EXTERNAL IDS

db:	NVD	id:	CVE-2016-4200	Trust: 3.5
db:	ZDI	id:	ZDI-16-419	Trust: 2.1
db:	BID	id:	91716	Trust: 1.4
db:	SECTRACK	id:	1036281	Trust: 1.1
db:	JVNDB	id:	JVNDB-2016-003631	Trust: 0.8
db:	ZDI_CAN	id:	ZDI-CAN-3737	Trust: 0.7
db:	CNNVD	id:	CNNVD-201607-257	Trust: 0.7
db:	ZDI	id:	ZDI-16-415	Trust: 0.3
db:	ZDI	id:	ZDI-16-418	Trust: 0.3
db:	ZDI	id:	ZDI-16-416	Trust: 0.3
db:	ZDI	id:	ZDI-16-421	Trust: 0.3
db:	ZDI	id:	ZDI-16-414	Trust: 0.3
db:	ZDI	id:	ZDI-16-423	Trust: 0.3
db:	ZDI	id:	ZDI-16-422	Trust: 0.3
db:	ZDI	id:	ZDI-16-417	Trust: 0.3
db:	VULHUB	id:	VHN-93019	Trust: 0.1

sources: ZDI: ZDI-16-419 // VULHUB: VHN-93019 // BID: 91716 // JVNDB: JVNDB-2016-003631 // NVD: CVE-2016-4200 // CNNVD: CNNVD-201607-257

REFERENCES

url:	https://helpx.adobe.com/security/products/acrobat/apsb16-26.html	Trust: 2.7
url:	http://www.zerodayinitiative.com/advisories/zdi-16-419	Trust: 1.4
url:	http://www.securityfocus.com/bid/91716	Trust: 1.1
url:	http://www.securitytracker.com/id/1036281	Trust: 1.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-4200	Trust: 0.8
url:	http://www.ipa.go.jp/security/ciadr/vul/20160713-adobereader.html	Trust: 0.8
url:	http://www.jpcert.or.jp/at/2016/at160030.html	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-4200	Trust: 0.8
url:	http://www.npa.go.jp/cyberpolice/topics/?seq=18716	Trust: 0.8
url:	http://www.adobe.com/products/acrobat/	Trust: 0.3
url:	http://www.adobe.com	Trust: 0.3
url:	http://get.adobe.com/reader/	Trust: 0.3
url:	http://www.zerodayinitiative.com/advisories/zdi-16-414	Trust: 0.3
url:	http://www.zerodayinitiative.com/advisories/zdi-16-415	Trust: 0.3
url:	http://www.zerodayinitiative.com/advisories/zdi-16-416	Trust: 0.3
url:	http://www.zerodayinitiative.com/advisories/zdi-16-417	Trust: 0.3
url:	http://www.zerodayinitiative.com/advisories/zdi-16-418	Trust: 0.3
url:	http://www.zerodayinitiative.com/advisories/zdi-16-421	Trust: 0.3
url:	http://www.zerodayinitiative.com/advisories/zdi-16-422	Trust: 0.3
url:	http://www.zerodayinitiative.com/advisories/zdi-16-423	Trust: 0.3

sources: ZDI: ZDI-16-419 // VULHUB: VHN-93019 // BID: 91716 // JVNDB: JVNDB-2016-003631 // NVD: CVE-2016-4200 // CNNVD: CNNVD-201607-257

CREDITS

AbdulAziz Hariri - Trend Micro Zero Day Initiative

Trust: 0.7

sources: ZDI: ZDI-16-419

SOURCES

db:	ZDI	id:	ZDI-16-419
db:	VULHUB	id:	VHN-93019
db:	BID	id:	91716
db:	JVNDB	id:	JVNDB-2016-003631
db:	NVD	id:	CVE-2016-4200
db:	CNNVD	id:	CNNVD-201607-257

LAST UPDATE DATE

2023-12-18T12:05:47.999000+00:00

SOURCES UPDATE DATE

db:	ZDI	id:	ZDI-16-419	date:	2016-07-12T00:00:00
db:	VULHUB	id:	VHN-93019	date:	2017-09-01T00:00:00
db:	BID	id:	91716	date:	2016-07-15T23:00:00
db:	JVNDB	id:	JVNDB-2016-003631	date:	2016-07-15T00:00:00
db:	NVD	id:	CVE-2016-4200	date:	2017-09-01T01:29:19.897
db:	CNNVD	id:	CNNVD-201607-257	date:	2016-07-13T00:00:00

SOURCES RELEASE DATE

db:	ZDI	id:	ZDI-16-419	date:	2016-07-12T00:00:00
db:	VULHUB	id:	VHN-93019	date:	2016-07-13T00:00:00
db:	BID	id:	91716	date:	2016-07-12T00:00:00
db:	JVNDB	id:	JVNDB-2016-003631	date:	2016-07-15T00:00:00
db:	NVD	id:	CVE-2016-4200	date:	2016-07-13T02:00:10.210
db:	CNNVD	id:	CNNVD-201607-257	date:	2016-07-13T00:00:00