CVE-2016-0935

Published: Jan 14, 2016Modified: May 6, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Double free vulnerability in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code via a crafted ExtGState dictionary.

Affected (32)

Products: Adobe: Acrobat Dc, Acrobat Reader Dc, Acrobat Reader, Acrobat

4 products

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Adobe Acrobat Dc	Up to 15.006.30097
Adobe Acrobat Dc	Up to 15.009.20077
Adobe Acrobat Reader Dc	Up to 15.006.30097
Adobe Acrobat Reader Dc	Up to 15.009.20077

Configuration B

14 vulnerable

Vulnerable Software	Affected Versions
Adobe Acrobat Reader	Up to 11.0.13
Adobe Acrobat Reader	Version 11.0.0
Adobe Acrobat Reader	Version 11.0.10
Adobe Acrobat Reader	Version 11.0.11
Adobe Acrobat Reader	Version 11.0.12
Adobe Acrobat Reader	Version 11.0.1
Adobe Acrobat Reader	Version 11.0.2
Adobe Acrobat Reader	Version 11.0.3
Adobe Acrobat Reader	Version 11.0.4
Adobe Acrobat Reader	Version 11.0.5
Adobe Acrobat Reader	Version 11.0.6
Adobe Acrobat Reader	Version 11.0.7
Adobe Acrobat Reader	Version 11.0.8
Adobe Acrobat Reader	Version 11.0.9

Configuration C

14 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Adobe Acrobat	Up to 11.0.13
Adobe Acrobat	Version 11.0.0
Adobe Acrobat	Version 11.0.10
Adobe Acrobat	Version 11.0.11
Adobe Acrobat	Version 11.0.12
Adobe Acrobat	Version 11.0.1
Adobe Acrobat	Version 11.0.2
Adobe Acrobat	Version 11.0.3
Adobe Acrobat	Version 11.0.4
Adobe Acrobat	Version 11.0.5
Adobe Acrobat	Version 11.0.6
Adobe Acrobat	Version 11.0.7
Adobe Acrobat	Version 11.0.8
Adobe Acrobat	Version 11.0.9