PT-2016-1953 · Adobe · Acrobat+1

Publicado 2016-05-05 · Atualizado 2016-12-02 · CVE-2016-4106

Positive Technologies (AI Summary)

CVSS v3.1

8.4

Alta

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Adobe Reader versions (affected versions not specified) Adobe Acrobat versions (affected versions not specified)

Description The issue is related to the use of an insecure search path in Adobe Reader and Adobe Acrobat. This could allow a local attacker to elevate privileges by using a Trojan file in an uninstalled directory. The vulnerability enables attackers to execute code.

Recommendations For Adobe Reader, consider restricting access to uninstalled directories to minimize the risk of exploitation. For Adobe Acrobat, avoid using unverified resources until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

BDU:2016-01286

CVE-2016-4106

Produtos afetados

Acrobat

Reader

Referências · 7

• http://securitytracker.com/id/1035828 · Nota
• https://bdu.fstec.ru/vul/2016-01286 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-4106 · Aviso do Fabricante
• https://helpx.adobe.com/security/products/acrobat/apsb16-14.html · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4106 · Nota
• http://securityfocus.com/bid/90513 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-4106 · Nota de Segurança