CVE-2016-1008: Input Validation
First published: Wed Mar 09 2016(Updated: )
Untrusted search path vulnerability in Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat Reader DC Classic before 15.006.30121, and Acrobat and Acrobat Reader DC Continuous before 15.010.20060 on Windows and OS X allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Acrobat Reader | <=11.0.14 | |
| Adobe Acrobat | <=15.006.30119 | |
| Adobe Acrobat | <=15.010.20059 | |
| Adobe Acrobat Reader | <=11.0.14 | |
| Adobe Acrobat Reader | <=15.010.20059 | |
| Adobe Acrobat Reader | =15.006.30119 | |
| Apple iOS and macOS | ||
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-1008?
CVE-2016-1008 is considered a moderate severity vulnerability that allows local users to gain privileges.
How do I fix CVE-2016-1008?
To resolve CVE-2016-1008, update Adobe Reader and Acrobat to versions 11.0.15, 15.006.30121, or later.
Which software is affected by CVE-2016-1008?
CVE-2016-1008 affects Adobe Reader and Acrobat versions prior to 11.0.15 and various versions of Acrobat DC.
What type of vulnerability is CVE-2016-1008?
CVE-2016-1008 is an untrusted search path vulnerability that can be exploited via a Trojan horse DLL.
Can I verify if my system is vulnerable to CVE-2016-1008?
Yes, you can verify your system's vulnerability to CVE-2016-1008 by checking if you are running an affected version of Adobe Reader or Acrobat.
- agent/references
- agent/type
- agent/remedy
- agent/severity
- agent/weakness
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/adobe
- canonical/adobe acrobat reader
- version/adobe acrobat reader/11.0.14
- canonical/adobe acrobat
- version/adobe acrobat/15.006.30119
- version/adobe acrobat/15.010.20059
- version/adobe acrobat reader/15.010.20059
- version/adobe acrobat reader/15.006.30119
- vendor/apple
- canonical/apple ios and macos
- vendor/microsoft
- canonical/microsoft windows