CVE-2016-1087
First published: Wed May 11 2016(Updated: )
Untrusted search path vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows local users to gain privileges via a Trojan horse resource in an unspecified directory, a different vulnerability than CVE-2016-1090 and CVE-2016-4106.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple iOS and macOS | ||
| Microsoft Windows | ||
| Adobe Acrobat Reader | <=11.0.15 | |
| Adobe Acrobat | <=15.006.30121 | |
| Adobe Acrobat | <=15.010.20060 | |
| Adobe Acrobat Reader | <=15.006.30121 | |
| Adobe Acrobat Reader | <=15.010.20060 | |
| Adobe Acrobat Reader | <=11.0.15 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-1087?
CVE-2016-1087 is classified as a high severity vulnerability due to its potential for local privilege escalation.
How do I fix CVE-2016-1087?
To remediate CVE-2016-1087, update Adobe Reader and Acrobat to the latest versions available.
Which versions of Adobe software are affected by CVE-2016-1087?
CVE-2016-1087 affects Adobe Reader and Acrobat versions prior to 11.0.16 and certain versions of Acrobat DC before 15.016.20039.
What type of vulnerability is CVE-2016-1087?
CVE-2016-1087 is an untrusted search path vulnerability that allows local users to exploit the system using a Trojan horse resource.
Can this vulnerability be exploited remotely?
No, CVE-2016-1087 requires local access to the system to be exploited.
- agent/type
- agent/remedy
- agent/severity
- agent/references
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/apple
- canonical/apple ios and macos
- vendor/microsoft
- canonical/microsoft windows
- vendor/adobe
- canonical/adobe acrobat reader
- version/adobe acrobat reader/11.0.15
- canonical/adobe acrobat
- version/adobe acrobat/15.006.30121
- version/adobe acrobat/15.010.20060
- version/adobe acrobat reader/15.006.30121
- version/adobe acrobat reader/15.010.20060