CVE-2016-0940: Use After Free

Q: What is the severity of CVE-2016-0940?

CVE-2016-0940 is rated as critical due to its potential to allow attackers to execute arbitrary code.

Q: How do I fix CVE-2016-0940?

To fix CVE-2016-0940, upgrade Adobe Acrobat and Acrobat Reader to version 11.0.14 or newer, or appropriate updates for the DC versions.

Q: What products are affected by CVE-2016-0940?

CVE-2016-0940 affects Adobe Reader and Acrobat prior to version 11.0.14, and Acrobat DC versions before 15.010.20056.

Q: What type of vulnerability is CVE-2016-0940?

CVE-2016-0940 is classified as a use-after-free vulnerability.

Q: Can CVE-2016-0940 affect Mac users?

Yes, CVE-2016-0940 can impact users on both Windows and macOS systems.

Published Jan 14, 2016

Updated

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0932, CVE-2016-0934, CVE-2016-0937, and CVE-2016-0941.

Affected Software

34 affected components

Adobe Acrobat<=11.0.13

Adobe Acrobat=11.0.0

Adobe Acrobat=11.0.1

Adobe Acrobat=11.0.2

Adobe Acrobat=11.0.3

Adobe Acrobat=11.0.4

Adobe Acrobat=11.0.5

Adobe Acrobat=11.0.6

Adobe Acrobat=11.0.7

Adobe Acrobat=11.0.8

Adobe Acrobat=11.0.9

Adobe Acrobat=11.0.10

Adobe Acrobat=11.0.11

Adobe Acrobat=11.0.12

Apple iOS and macOS

Microsoft Windows

Adobe Acrobat DC<=15.006.30097

Adobe Acrobat DC<=15.009.20077

Adobe Acrobat Reader DC<=15.006.30097

Adobe Acrobat Reader DC<=15.009.20077

Adobe Acrobat Reader<=11.0.13

Adobe Acrobat Reader=11.0.0

Adobe Acrobat Reader=11.0.1

Adobe Acrobat Reader=11.0.2

Adobe Acrobat Reader=11.0.3

Adobe Acrobat Reader=11.0.4

Adobe Acrobat Reader=11.0.5

Adobe Acrobat Reader=11.0.6

Adobe Acrobat Reader=11.0.7

Adobe Acrobat Reader=11.0.8

Adobe Acrobat Reader=11.0.9

Adobe Acrobat Reader=11.0.10

Adobe Acrobat Reader=11.0.11

Adobe Acrobat Reader=11.0.12

Remediation

Patch Available

https://helpx.adobe.com/security/products/acrobat/apsb16-02.html

Event History

Jan 14, 2016

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-0940?

CVE-2016-0940 is rated as critical due to its potential to allow attackers to execute arbitrary code.

How do I fix CVE-2016-0940?