CVE-2016-1090
First published: Wed May 11 2016(Updated: )
Untrusted search path vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows local users to gain privileges via a Trojan horse resource in an unspecified directory, a different vulnerability than CVE-2016-1087 and CVE-2016-4106.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple iOS and macOS | ||
| Microsoft Windows | ||
| Adobe Acrobat Reader | <=11.0.15 | |
| Adobe Acrobat | <=15.006.30121 | |
| Adobe Acrobat | <=15.010.20060 | |
| Adobe Acrobat Reader | <=15.006.30121 | |
| Adobe Acrobat Reader | <=15.010.20060 | |
| Adobe Acrobat Reader | <=11.0.15 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-1090?
CVE-2016-1090 is rated as a low-severity vulnerability.
How do I fix CVE-2016-1090?
To fix CVE-2016-1090, update Adobe Reader and Acrobat to version 11.0.16 or later, or upgrade to a newer version of Acrobat DC.
Who is affected by CVE-2016-1090?
CVE-2016-1090 affects users of Adobe Reader and Acrobat versions prior to 11.0.16 and specific versions of Acrobat DC.
Can CVE-2016-1090 be exploited remotely?
CVE-2016-1090 requires local access, meaning it cannot be exploited remotely.
What is the main threat posed by CVE-2016-1090?
The main threat of CVE-2016-1090 is that local users could gain elevated privileges through a Trojan horse resource.
- agent/type
- agent/remedy
- agent/severity
- agent/references
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/apple
- canonical/apple ios and macos
- vendor/microsoft
- canonical/microsoft windows
- vendor/adobe
- canonical/adobe acrobat reader
- version/adobe acrobat reader/11.0.15
- canonical/adobe acrobat
- version/adobe acrobat/15.006.30121
- version/adobe acrobat/15.010.20060
- version/adobe acrobat reader/15.006.30121
- version/adobe acrobat reader/15.010.20060