CVE-2016-4099: Buffer Overflow
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1037, CVE-2016-1063, CVE-2016-1064, CVE-2016-1071, CVE-2016-1072, CVE-2016-1073, CVE-2016-1074, CVE-2016-1076, CVE-2016-1077, CVE-2016-1078, CVE-2016-1080, CVE-2016-1081, CVE-2016-1082, CVE-2016-1083, CVE-2016-1084, CVE-2016-1085, CVE-2016-1086, CVE-2016-1088, CVE-2016-1093, CVE-2016-1095, CVE-2016-1116, CVE-2016-1118, CVE-2016-1119, CVE-2016-1120, CVE-2016-1123, CVE-2016-1124, CVE-2016-1125, CVE-2016-1126, CVE-2016-1127, CVE-2016-1128, CVE-2016-1129, CVE-2016-1130, CVE-2016-4088, CVE-2016-4089, CVE-2016-4090, CVE-2016-4093, CVE-2016-4094, CVE-2016-4096, CVE-2016-4097, CVE-2016-4098, CVE-2016-4100, CVE-2016-4101, CVE-2016-4103, CVE-2016-4104, and CVE-2016-4105.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4099?
CVE-2016-4099 has a critical severity rating due to its potential to allow attackers to execute arbitrary code.
How do I fix CVE-2016-4099?
To fix CVE-2016-4099, update Adobe Reader and Acrobat to version 11.0.16 or later, or Acrobat and Acrobat Reader DC to versions 15.006.30172 or 15.016.20039 respectively.
What versions of Adobe products are affected by CVE-2016-4099?
CVE-2016-4099 affects Adobe Reader and Acrobat versions prior to 11.0.16 and Acrobat DC versions before 15.006.30172.
Is CVE-2016-4099 a denial of service risk?
Yes, CVE-2016-4099 can lead to a denial of service through memory corruption.
Can CVE-2016-4099 be exploited remotely?
Yes, CVE-2016-4099 can be exploited remotely by attackers to execute arbitrary code.