Sign-up

ID

VAR-201607-0529


CVE

CVE-2016-4255


TITLE

Windows and Mac OS X Run on Adobe Reader and Acrobat Vulnerable to arbitrary code execution

Trust: 0.8

sources: JVNDB: JVNDB-2016-003618

DESCRIPTION

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors. Supplementary information : CWE Vulnerability type by CWE-416: Use After Free ( Use of freed memory ) Has been identified. http://cwe.mitre.org/data/definitions/416.htmlAn attacker could execute arbitrary code. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within FlateDecode. A specially crafted PDF with a specific FlateDecode stream can force a dangling pointer to be reused after it has been freed. Failed attacks may cause a denial-of-service condition. The title has been changed to better reflect the underlying component affected. Adobe Reader, etc. are all products of Adobe (Adobe) in the United States. Adobe Reader is a free PDF file reader; Acrobat is a PDF file editing and conversion tool; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF. A use-after-free vulnerability exists in several Adobe products

Trust: 2.61

sources: NVD: CVE-2016-4255 // JVNDB: JVNDB-2016-003618 // ZDI: ZDI-16-420 // BID: 91714 // VULHUB: VHN-93074

AFFECTED PRODUCTS

vendor:adobemodel:acrobat dcscope:lteversion:15.006.30174

Trust: 1.0

vendor:adobemodel:acrobat dcscope:lteversion:15.016.20045

Trust: 1.0

vendor:adobemodel:acrobat reader dcscope:lteversion:15.016.20045

Trust: 1.0

vendor:adobemodel:acrobat reader dcscope:lteversion:15.006.30174

Trust: 1.0

vendor:adobemodel:acrobatscope:lteversion:11.0.16

Trust: 1.0

vendor:adobemodel:readerscope:lteversion:11.0.16

Trust: 1.0

vendor:adobemodel:acrobatscope:ltversion:xi desktop 11.0.17 (windows/macintosh)

Trust: 0.8

vendor:adobemodel:acrobat dcscope:ltversion:classic 15.006.30198 (windows/macintosh)

Trust: 0.8

vendor:adobemodel:acrobat dcscope:ltversion:continuous track 15.017.20050 (windows/macintosh)

Trust: 0.8

vendor:adobemodel:acrobat reader dcscope:ltversion:classic 15.006.30198 (windows/macintosh)

Trust: 0.8

vendor:adobemodel:acrobat reader dcscope:ltversion:continuous track 15.017.20050 (windows/macintosh)

Trust: 0.8

vendor:adobemodel:readerscope:ltversion:xi desktop 11.0.17 (windows/macintosh)

Trust: 0.8

vendor:adobemodel:acrobat reader dcscope: - version: -

Trust: 0.7

vendor:applemodel:mac os xscope: - version: -

Trust: 0.6

vendor:adobemodel:acrobat reader dcscope:eqversion:15.6.30174

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.13

Trust: 0.3

vendor:microsoftmodel:edgescope:eqversion:0

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.6

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.09

Trust: 0.3

vendor:adobemodel:acrobat dcscope:eqversion:15.6.30097

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.3

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:eqversion:15.6.30172

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:eqversion:15.16.20045

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:eqversion:15.010.20056

Trust: 0.3

vendor:adobemodel:acrobat dcscope:eqversion:15.10.20059

Trust: 0.3

vendor:adobemodel:readerscope:neversion:11.0.17

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:eqversion:15.6.30121

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.10

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.4

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.14

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:eqversion:15.006.30119

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:eqversion:15.16.20039

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.1

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:eqversion:15.9.20077

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:neversion:15.17.20050

Trust: 0.3

vendor:adobemodel:acrobat dcscope:eqversion:15.10.20060

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:eqversion:15.6.30097

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.16

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.4

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.10

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.14

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.1

Trust: 0.3

vendor:microsoftmodel:internet explorerscope:eqversion:11

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:eqversion:15.10.20059

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.12

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.15

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.08

Trust: 0.3

vendor:adobemodel:acrobat dcscope:eqversion:15.6.30174

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.16

Trust: 0.3

vendor:adobemodel:acrobat dcscope:neversion:15.6.30198

Trust: 0.3

vendor:adobemodel:acrobat dcscope:eqversion:15.6.30172

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:eqversion:15.10.20060

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.2

Trust: 0.3

vendor:adobemodel:acrobat dcscope:eqversion:15.16.20045

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.11

Trust: 0.3

vendor:adobemodel:acrobat dcscope:eqversion:15.010.20056

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.7

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.9

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.13

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.15

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.12

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.08

Trust: 0.3

vendor:adobemodel:acrobat dcscope:eqversion:15.6.30121

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.09

Trust: 0.3

vendor:adobemodel:acrobat dcscope:eqversion:15.9.20077

Trust: 0.3

vendor:adobemodel:acrobat dcscope:eqversion:15.006.30119

Trust: 0.3

vendor:adobemodel:acrobat dcscope:neversion:15.17.20050

Trust: 0.3

vendor:adobemodel:acrobat dcscope:eqversion:15.16.20039

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.6

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.11

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.05

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:neversion:15.6.30198

Trust: 0.3

vendor:adobemodel:acrobatscope:neversion:11.0.17

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.3

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.7

Trust: 0.3

sources: ZDI: ZDI-16-420 // BID: 91714 // JVNDB: JVNDB-2016-003618 // CNNVD: CNNVD-201607-311 // NVD: CVE-2016-4255

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2016-4255
value: HIGH

Trust: 1.0

NVD: CVE-2016-4255
value: HIGH

Trust: 0.8

ZDI: CVE-2016-4255
value: MEDIUM

Trust: 0.7

CNNVD: CNNVD-201607-311
value: MEDIUM

Trust: 0.6

VULHUB: VHN-93074
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2016-4255
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 2.5

VULHUB: VHN-93074
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2016-4255
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 2.8
impactScore: 5.9
version: 3.0

Trust: 1.8

sources: ZDI: ZDI-16-420 // VULHUB: VHN-93074 // JVNDB: JVNDB-2016-003618 // CNNVD: CNNVD-201607-311 // NVD: CVE-2016-4255

PROBLEMTYPE DATA

problemtype:NVD-CWE-Other

Trust: 1.0

problemtype:CWE-Other

Trust: 0.8

sources: JVNDB: JVNDB-2016-003618 // NVD: CVE-2016-4255

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201607-311

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-201607-311

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2016-003618

PATCH
title:APSB16-26url:https://helpx.adobe.com/security/products/acrobat/apsb16-26.html
Trust: 1.5
title:APSB16-26url:https://helpx.adobe.com/jp/security/products/acrobat/apsb16-26.html
Trust: 0.8
title:アドビ システムズ社 Adobe Reader の脆弱性に関するお知らせurl:http://www.fmworld.net/biz/common/adobe/20160714.html
Trust: 0.8
title:Multiple Adobe Remediation measures for reusing vulnerabilities after product releaseurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=62894
Trust: 0.6
sources:
            
            
            ZDI: ZDI-16-420 // 
            
            
            
            JVNDB: JVNDB-2016-003618 // 
            
            
            
            CNNVD: CNNVD-201607-311

EXTERNAL IDS
db:NVDid:CVE-2016-4255
Trust: 3.5
db:ZDIid:ZDI-16-420
Trust: 2.1
db:BIDid:91714
Trust: 1.4
db:SECTRACKid:1036281
Trust: 1.1
db:JVNDBid:JVNDB-2016-003618
Trust: 0.8
db:ZDI_CANid:ZDI-CAN-3663
Trust: 0.7
db:CNNVDid:CNNVD-201607-311
Trust: 0.7
db:VULHUBid:VHN-93074
Trust: 0.1
sources:
            
            
            ZDI: ZDI-16-420 // 
            
            
            
            VULHUB: VHN-93074 // 
            
            
            
            BID: 91714 // 
            
            
            
            JVNDB: JVNDB-2016-003618 // 
            
            
            
            CNNVD: CNNVD-201607-311 // 
            
            
            
            NVD: CVE-2016-4255

REFERENCES
url:https://helpx.adobe.com/security/products/acrobat/apsb16-26.html
Trust: 2.7
url:http://www.zerodayinitiative.com/advisories/zdi-16-420
Trust: 1.4
url:http://www.securityfocus.com/bid/91714
Trust: 1.1
url:http://www.securitytracker.com/id/1036281
Trust: 1.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-4255
Trust: 0.8
url:http://www.ipa.go.jp/security/ciadr/vul/20160713-adobereader.html
Trust: 0.8
url:http://www.jpcert.or.jp/at/2016/at160030.html
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-4255
Trust: 0.8
url:http://www.npa.go.jp/cyberpolice/topics/?seq=18716
Trust: 0.8
url:http://www.adobe.com/products/acrobat/
Trust: 0.3
url:http://www.adobe.com
Trust: 0.3
url:http://get.adobe.com/reader/
Trust: 0.3
sources:
            
            
            ZDI: ZDI-16-420 // 
            
            
            
            VULHUB: VHN-93074 // 
            
            
            
            BID: 91714 // 
            
            
            
            JVNDB: JVNDB-2016-003618 // 
            
            
            
            CNNVD: CNNVD-201607-311 // 
            
            
            
            NVD: CVE-2016-4255

CREDITS
Jaanus Kp Clarified Security
Trust: 0.7
sources:
            
            
            ZDI: ZDI-16-420

SOURCES
db:ZDIid:ZDI-16-420
db:VULHUBid:VHN-93074
db:BIDid:91714
db:JVNDBid:JVNDB-2016-003618
db:CNNVDid:CNNVD-201607-311
db:NVDid:CVE-2016-4255

LAST UPDATE DATE
2025-04-13T23:02:54.183000+00:00

SOURCES UPDATE DATE
db:ZDIid:ZDI-16-420date:2016-07-12T00:00:00
db:VULHUBid:VHN-93074date:2017-09-01T00:00:00
db:BIDid:91714date:2016-07-15T22:00:00
db:JVNDBid:JVNDB-2016-003618date:2016-07-15T00:00:00
db:CNNVDid:CNNVD-201607-311date:2016-07-13T00:00:00
db:NVDid:CVE-2016-4255date:2025-04-12T10:46:40.837

SOURCES RELEASE DATE
db:ZDIid:ZDI-16-420date:2016-07-12T00:00:00
db:VULHUBid:VHN-93074date:2016-07-13T00:00:00
db:BIDid:91714date:2016-07-12T00:00:00
db:JVNDBid:JVNDB-2016-003618date:2016-07-15T00:00:00
db:CNNVDid:CNNVD-201607-311date:2016-07-13T00:00:00
db:NVDid:CVE-2016-4255date:2016-07-13T02:01:00.347