CVE-2016-0937

Published: Jan 14, 2016Modified: May 6, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Use-after-free vulnerability in the OCG object implementation in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0932, CVE-2016-0934, CVE-2016-0940, and CVE-2016-0941.

Affected (32)

Products: Adobe: Acrobat Reader, Acrobat, Acrobat Dc, Acrobat Reader Dc

4 products

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Adobe Acrobat Reader	Up to 11.0.13
Adobe Acrobat Reader	Version 11.0.0
Adobe Acrobat Reader	Version 11.0.10
Adobe Acrobat Reader	Version 11.0.11
Adobe Acrobat Reader	Version 11.0.12
Adobe Acrobat Reader	Version 11.0.1
Adobe Acrobat Reader	Version 11.0.2
Adobe Acrobat Reader	Version 11.0.3
Adobe Acrobat Reader	Version 11.0.4
Adobe Acrobat Reader	Version 11.0.5
Adobe Acrobat Reader	Version 11.0.6
Adobe Acrobat Reader	Version 11.0.7
Adobe Acrobat Reader	Version 11.0.8
Adobe Acrobat Reader	Version 11.0.9

Configuration B

14 vulnerable

Vulnerable Software	Affected Versions
Adobe Acrobat	Up to 11.0.13
Adobe Acrobat	Version 11.0.0
Adobe Acrobat	Version 11.0.10
Adobe Acrobat	Version 11.0.11
Adobe Acrobat	Version 11.0.12
Adobe Acrobat	Version 11.0.1
Adobe Acrobat	Version 11.0.2
Adobe Acrobat	Version 11.0.3
Adobe Acrobat	Version 11.0.4
Adobe Acrobat	Version 11.0.5
Adobe Acrobat	Version 11.0.6
Adobe Acrobat	Version 11.0.7
Adobe Acrobat	Version 11.0.8
Adobe Acrobat	Version 11.0.9

Configuration C

4 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Adobe Acrobat Dc	Up to 15.006.30097
Adobe Acrobat Dc	Up to 15.009.20077
Adobe Acrobat Reader Dc	Up to 15.006.30097
Adobe Acrobat Reader Dc	Up to 15.009.20077