CVE-2016-4208: Buffer Overflow
Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4191, CVE-2016-4192, CVE-2016-4193, CVE-2016-4194, CVE-2016-4195, CVE-2016-4196, CVE-2016-4197, CVE-2016-4198, CVE-2016-4199, CVE-2016-4200, CVE-2016-4201, CVE-2016-4202, CVE-2016-4203, CVE-2016-4204, CVE-2016-4205, CVE-2016-4206, CVE-2016-4207, CVE-2016-4211, CVE-2016-4212, CVE-2016-4213, CVE-2016-4214, CVE-2016-4250, CVE-2016-4251, CVE-2016-4252, and CVE-2016-4254.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4208?
CVE-2016-4208 is classified as a critical vulnerability due to its potential to allow arbitrary code execution and denial of service.
How do I fix CVE-2016-4208?
To fix CVE-2016-4208, update Adobe Reader and Acrobat to the latest versions beyond 11.0.17, 15.006.30198, or 15.017.20050 depending on your software.
Which versions of Adobe software are affected by CVE-2016-4208?
CVE-2016-4208 affects Adobe Reader and Acrobat versions prior to 11.0.17 and several versions of Acrobat DC Classic and Continuous prior to 15.006.30198 and 15.017.20050.
What types of attacks could be executed using CVE-2016-4208?
Attackers could exploit CVE-2016-4208 to execute arbitrary code or trigger memory corruption, potentially leading to denial of service.
Are there any workarounds for CVE-2016-4208?
Currently, the best protection against CVE-2016-4208 is to update the affected Adobe products to the latest patched versions.