Sign-up

ID

VAR-201610-0467


CVE

CVE-2016-6945


TITLE

Windows and Mac OS X Run on Adobe Reader and Acrobat Vulnerable to arbitrary code execution

Trust: 0.8

sources: JVNDB: JVNDB-2016-005256

DESCRIPTION

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1089, CVE-2016-1091, CVE-2016-6944, CVE-2016-6946, CVE-2016-6949, CVE-2016-6952, CVE-2016-6953, CVE-2016-6961, CVE-2016-6962, CVE-2016-6963, CVE-2016-6964, CVE-2016-6965, CVE-2016-6967, CVE-2016-6968, CVE-2016-6969, CVE-2016-6971, CVE-2016-6979, CVE-2016-6988, and CVE-2016-6993. This vulnerability CVE-2016-1089 , CVE-2016-1091 , CVE-2016-6944 , CVE-2016-6946 , CVE-2016-6949 , CVE-2016-6952 , CVE-2016-6953 , CVE-2016-6961 , CVE-2016-6962 , CVE-2016-6963 , CVE-2016-6964 , CVE-2016-6965 , CVE-2016-6967 , CVE-2016-6968 , CVE-2016-6969 , CVE-2016-6971 , CVE-2016-6979 , CVE-2016-6988 ,and CVE-2016-6993 Is a different vulnerability. Supplementary information : CWE Vulnerability type by CWE-416: Use After Free ( Use of freed memory ) Has been identified. http://cwe.mitre.org/data/definitions/416.htmlAn attacker could execute arbitrary code. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the SaveAs menu item. The issue lies in the failure to properly validate the existence of an object prior to performing operations on it. Failed exploit attempts will likely cause a denial-of-service condition. Adobe Reader, etc. are all products of Adobe (Adobe) in the United States. Adobe Reader is a free PDF file reader; Acrobat is a PDF file editing and conversion tool; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF

Trust: 2.7

sources: NVD: CVE-2016-6945 // JVNDB: JVNDB-2016-005256 // ZDI: ZDI-16-537 // BID: 93491 // VULHUB: VHN-95765 // VULMON: CVE-2016-6945

AFFECTED PRODUCTS

vendor:adobemodel:readerscope:lteversion:11.0.17

Trust: 1.0

vendor:adobemodel:acrobat dcscope:lteversion:15.017.20053

Trust: 1.0

vendor:adobemodel:acrobat dcscope:lteversion:15.006.30201

Trust: 1.0

vendor:adobemodel:acrobatscope:lteversion:11.0.17

Trust: 1.0

vendor:adobemodel:acrobat reader dcscope:lteversion:15.017.20053

Trust: 1.0

vendor:adobemodel:acrobat reader dcscope:lteversion:15.006.30201

Trust: 1.0

vendor:adobemodel:acrobatscope:ltversion:xi desktop 11.0.18 (windows/macintosh)

Trust: 0.8

vendor:adobemodel:acrobat dcscope:ltversion:classic 15.006.30243 (windows/macintosh)

Trust: 0.8

vendor:adobemodel:acrobat dcscope:ltversion:continuous track 15.020.20039 (windows/macintosh)

Trust: 0.8

vendor:adobemodel:acrobat reader dcscope:ltversion:classic 15.006.30243 (windows/macintosh)

Trust: 0.8

vendor:adobemodel:acrobat reader dcscope:ltversion:continuous track 15.020.20039 (windows/macintosh)

Trust: 0.8

vendor:adobemodel:readerscope:ltversion:xi desktop 11.0.18 (windows/macintosh)

Trust: 0.8

vendor:adobemodel:acrobat pro dcscope: - version: -

Trust: 0.7

vendor:applemodel:mac os xscope: - version: -

Trust: 0.6

vendor:adobemodel:acrobat reader dcscope:eqversion:15.6.30174

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.13

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.12

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:eqversion:15.17.20050

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.6

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.09

Trust: 0.3

vendor:adobemodel:acrobat dcscope:eqversion:15.6.30097

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:neversion:15.20.20039

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.3

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:eqversion:15.6.30172

Trust: 0.3

vendor:adobemodel:acrobat dcscope:eqversion:15.6.30201

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:eqversion:15.16.20045

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:eqversion:15.010.20056

Trust: 0.3

vendor:adobemodel:acrobat dcscope:eqversion:15.10.20059

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:eqversion:15.6.30121

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.10

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.4

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.14

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:eqversion:15.006.30119

Trust: 0.3

vendor:adobemodel:acrobat dcscope:eqversion:15.6.30198

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:eqversion:15.16.20039

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.1

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:eqversion:15.17.20053

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:eqversion:15.9.20077

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:neversion:15.6.30243

Trust: 0.3

vendor:adobemodel:acrobat dcscope:eqversion:15.10.20060

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:eqversion:15.6.30097

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.16

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.4

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.10

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.14

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.1

Trust: 0.3

vendor:adobemodel:readerscope:neversion:11.0.18

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:eqversion:15.6.30201

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:eqversion:15.10.20059

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.12

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.15

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.08

Trust: 0.3

vendor:adobemodel:acrobat dcscope:eqversion:15.6.30174

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.16

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.17

Trust: 0.3

vendor:adobemodel:acrobat dcscope:eqversion:15.17.20050

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:eqversion:15.6.30198

Trust: 0.3

vendor:adobemodel:acrobat dcscope:neversion:15.20.20039

Trust: 0.3

vendor:adobemodel:acrobatscope:neversion:11.0.18

Trust: 0.3

vendor:adobemodel:acrobat dcscope:eqversion:15.6.30172

Trust: 0.3

vendor:adobemodel:acrobat reader dcscope:eqversion:15.10.20060

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.2

Trust: 0.3

vendor:adobemodel:acrobat dcscope:eqversion:15.16.20045

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.11

Trust: 0.3

vendor:adobemodel:acrobat dcscope:eqversion:15.010.20056

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.7

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.17

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.13

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.9

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.15

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.08

Trust: 0.3

vendor:adobemodel:acrobat dcscope:eqversion:15.6.30121

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.09

Trust: 0.3

vendor:adobemodel:acrobat dcscope:eqversion:15.9.20077

Trust: 0.3

vendor:adobemodel:acrobat dcscope:eqversion:15.006.30119

Trust: 0.3

vendor:adobemodel:acrobat dcscope:eqversion:15.16.20039

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.6

Trust: 0.3

vendor:adobemodel:acrobat dcscope:eqversion:15.17.20053

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.05

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.11

Trust: 0.3

vendor:adobemodel:acrobat dcscope:neversion:15.6.30243

Trust: 0.3

vendor:adobemodel:readerscope:eqversion:11.0.3

Trust: 0.3

vendor:adobemodel:acrobatscope:eqversion:11.0.7

Trust: 0.3

sources: ZDI: ZDI-16-537 // BID: 93491 // JVNDB: JVNDB-2016-005256 // CNNVD: CNNVD-201610-408 // NVD: CVE-2016-6945

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2016-6945
value: CRITICAL

Trust: 1.0

NVD: CVE-2016-6945
value: CRITICAL

Trust: 0.8

ZDI: CVE-2016-6945
value: MEDIUM

Trust: 0.7

CNNVD: CNNVD-201610-408
value: CRITICAL

Trust: 0.6

VULHUB: VHN-95765
value: HIGH

Trust: 0.1

VULMON: CVE-2016-6945
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2016-6945
severity: HIGH
baseScore: 10.0
vectorString: AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

ZDI: CVE-2016-6945
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.7

VULHUB: VHN-95765
severity: HIGH
baseScore: 10.0
vectorString: AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2016-6945
baseSeverity: CRITICAL
baseScore: 9.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 5.9
version: 3.0

Trust: 1.8

sources: ZDI: ZDI-16-537 // VULHUB: VHN-95765 // VULMON: CVE-2016-6945 // JVNDB: JVNDB-2016-005256 // CNNVD: CNNVD-201610-408 // NVD: CVE-2016-6945

PROBLEMTYPE DATA

problemtype:CWE-416

Trust: 1.1

problemtype:CWE-Other

Trust: 0.8

sources: VULHUB: VHN-95765 // JVNDB: JVNDB-2016-005256 // NVD: CVE-2016-6945

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201610-408

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-201610-408

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2016-005256

PATCH
title:APSB16-33url:https://helpx.adobe.com/security/products/acrobat/apsb16-33.html
Trust: 1.5
title:APSB16-33url:https://helpx.adobe.com/jp/security/products/acrobat/apsb16-33.html
Trust: 0.8
title:アドビ システムズ社 Adobe Reader の脆弱性に関するお知らせurl:http://www.fmworld.net/biz/common/adobe/20161013.html
Trust: 0.8
title:Adobe Reader  and Acrobat Remediation measures for reusing vulnerabilities after releaseurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=64784
Trust: 0.6
title:BleepingComputerurl:https://www.bleepingcomputer.com/news/security/adobe-releases-updates-that-resolve-84-security-vulnerabilities/
Trust: 0.1
sources:
            
            
            ZDI: ZDI-16-537 // 
            
            
            
            VULMON: CVE-2016-6945 // 
            
            
            
            JVNDB: JVNDB-2016-005256 // 
            
            
            
            CNNVD: CNNVD-201610-408

EXTERNAL IDS
db:NVDid:CVE-2016-6945
Trust: 3.6
db:BIDid:93491
Trust: 1.5
db:SECTRACKid:1036986
Trust: 1.2
db:JVNDBid:JVNDB-2016-005256
Trust: 0.8
db:ZDI_CANid:ZDI-CAN-3851
Trust: 0.7
db:ZDIid:ZDI-16-537
Trust: 0.7
db:CNNVDid:CNNVD-201610-408
Trust: 0.7
db:ZDIid:ZDI-16-563
Trust: 0.3
db:ZDIid:ZDI-16-561
Trust: 0.3
db:ZDIid:ZDI-16-552
Trust: 0.3
db:ZDIid:ZDI-16-548
Trust: 0.3
db:ZDIid:ZDI-16-559
Trust: 0.3
db:ZDIid:ZDI-16-556
Trust: 0.3
db:ZDIid:ZDI-16-560
Trust: 0.3
db:ZDIid:ZDI-16-544
Trust: 0.3
db:ZDIid:ZDI-16-551
Trust: 0.3
db:ZDIid:ZDI-16-549
Trust: 0.3
db:ZDIid:ZDI-16-545
Trust: 0.3
db:ZDIid:ZDI-16-547
Trust: 0.3
db:ZDIid:ZDI-16-554
Trust: 0.3
db:ZDIid:ZDI-16-546
Trust: 0.3
db:VULHUBid:VHN-95765
Trust: 0.1
db:VULMONid:CVE-2016-6945
Trust: 0.1
sources:
            
            
            ZDI: ZDI-16-537 // 
            
            
            
            VULHUB: VHN-95765 // 
            
            
            
            VULMON: CVE-2016-6945 // 
            
            
            
            BID: 93491 // 
            
            
            
            JVNDB: JVNDB-2016-005256 // 
            
            
            
            CNNVD: CNNVD-201610-408 // 
            
            
            
            NVD: CVE-2016-6945

REFERENCES
url:https://helpx.adobe.com/security/products/acrobat/apsb16-33.html
Trust: 2.5
url:http://www.securityfocus.com/bid/93491
Trust: 1.3
url:http://www.securitytracker.com/id/1036986
Trust: 1.2
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-6945
Trust: 0.8
url:http://www.ipa.go.jp/security/ciadr/vul/20161012-adobereader.html
Trust: 0.8
url:http://www.jpcert.or.jp/at/2016/at160041.html
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-6945
Trust: 0.8
url:http://www.adobe.com
Trust: 0.3
url:https://helpx.adobe.com/security/products/acrobat/apsb16-33.html 
Trust: 0.3
url:http://www.zerodayinitiative.com/advisories/zdi-16-544/
Trust: 0.3
url:http://www.zerodayinitiative.com/advisories/zdi-16-545/
Trust: 0.3
url:http://www.zerodayinitiative.com/advisories/zdi-16-546/
Trust: 0.3
url:http://www.zerodayinitiative.com/advisories/zdi-16-547/
Trust: 0.3
url:http://www.zerodayinitiative.com/advisories/zdi-16-548/
Trust: 0.3
url:http://www.zerodayinitiative.com/advisories/zdi-16-549/
Trust: 0.3
url:http://www.zerodayinitiative.com/advisories/zdi-16-551/
Trust: 0.3
url:http://www.zerodayinitiative.com/advisories/zdi-16-552/
Trust: 0.3
url:http://www.zerodayinitiative.com/advisories/zdi-16-554/
Trust: 0.3
url:http://www.zerodayinitiative.com/advisories/zdi-16-556/
Trust: 0.3
url:http://www.zerodayinitiative.com/advisories/zdi-16-559/
Trust: 0.3
url:http://www.zerodayinitiative.com/advisories/zdi-16-560/
Trust: 0.3
url:http://www.zerodayinitiative.com/advisories/zdi-16-561/
Trust: 0.3
url:http://www.zerodayinitiative.com/advisories/zdi-16-563/
Trust: 0.3
url:https://cwe.mitre.org/data/definitions/416.html
Trust: 0.1
url:https://nvd.nist.gov
Trust: 0.1
url:http://tools.cisco.com/security/center/viewalert.x?alertid=49245
Trust: 0.1
sources:
            
            
            ZDI: ZDI-16-537 // 
            
            
            
            VULHUB: VHN-95765 // 
            
            
            
            VULMON: CVE-2016-6945 // 
            
            
            
            BID: 93491 // 
            
            
            
            JVNDB: JVNDB-2016-005256 // 
            
            
            
            CNNVD: CNNVD-201610-408 // 
            
            
            
            NVD: CVE-2016-6945

CREDITS
AbdulAziz Hariri - Trend Micro Zero Day Initiative
Trust: 0.7
sources:
            
            
            ZDI: ZDI-16-537

SOURCES
db:ZDIid:ZDI-16-537
db:VULHUBid:VHN-95765
db:VULMONid:CVE-2016-6945
db:BIDid:93491
db:JVNDBid:JVNDB-2016-005256
db:CNNVDid:CNNVD-201610-408
db:NVDid:CVE-2016-6945

LAST UPDATE DATE
2025-04-13T23:02:04.310000+00:00

SOURCES UPDATE DATE
db:ZDIid:ZDI-16-537date:2016-10-11T00:00:00
db:VULHUBid:VHN-95765date:2017-07-30T00:00:00
db:VULMONid:CVE-2016-6945date:2017-07-30T00:00:00
db:BIDid:93491date:2016-10-26T00:03:00
db:JVNDBid:JVNDB-2016-005256date:2016-10-17T00:00:00
db:CNNVDid:CNNVD-201610-408date:2016-10-14T00:00:00
db:NVDid:CVE-2016-6945date:2025-04-12T10:46:40.837

SOURCES RELEASE DATE
db:ZDIid:ZDI-16-537date:2016-10-11T00:00:00
db:VULHUBid:VHN-95765date:2016-10-13T00:00:00
db:VULMONid:CVE-2016-6945date:2016-10-13T00:00:00
db:BIDid:93491date:2016-10-11T00:00:00
db:JVNDBid:JVNDB-2016-005256date:2016-10-17T00:00:00
db:CNNVDid:CNNVD-201610-408date:2016-10-14T00:00:00
db:NVDid:CVE-2016-6945date:2016-10-13T19:59:14.230