« Volver al listado

CVE-2016-0932

Estado: ModificadaAlta (8.8)—

Vulnerabilidad de uso después de liberación de memoria en la implementación del objeto Doc en Adobe Reader y Acrobat en versiones anteriores a 11.0.14, Acrobat y Acrobat Reader DC Classic en versiones anteriores a 15.006.30119 y Acrobat y Acrobat Reader DC Continuous en versiones anteriores a 15.010.20056 en Windows y OS X permite a atacantes ejecutar código arbitrario a través de vectores no especificados, una vulnerabilidad diferente a CVE-2016-0934, CVE-2016-0937, CVE-2016-0940 y CVE-2016-0941.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2016-0932",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@adobe.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2016-01-14T05:59:01.253",
  "references": [
    {
      "url": "http://www.securitytracker.com/id/1034646",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@adobe.com"
    },
    {
      "url": "http://zerodayinitiative.com/advisories/ZDI-16-008",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@adobe.com"
    },
    {
      "url": "https://helpx.adobe.com/security/products/acrobat/apsb16-02.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@adobe.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1034646",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://zerodayinitiative.com/advisories/ZDI-16-008",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://helpx.adobe.com/security/products/acrobat/apsb16-02.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Use-after-free vulnerability in the Doc object implementation in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0934, CVE-2016-0937, CVE-2016-0940, and CVE-2016-0941."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de uso después de liberación de memoria en la implementación del objeto Doc en Adobe Reader y Acrobat en versiones anteriores a 11.0.14, Acrobat y Acrobat Reader DC Classic en versiones anteriores a 15.006.30119 y Acrobat y Acrobat Reader DC Continuous en versiones anteriores a 15.010.20056 en Windows y OS X permite a atacantes ejecutar código arbitrario a través de vectores no especificados, una vulnerabilidad diferente a CVE-2016-0934, CVE-2016-0937, CVE-2016-0940 y CVE-2016-0941."
    }
  ],
  "lastModified": "2026-06-17T00:38:29.633",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AAB3A419-D57B-4E1E-83D3-34A2B73448A6",
              "versionEndIncluding": "11.0.13"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "829ED66F-149C-4EC5-B9F1-5DD678AF40DC"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E72C3C61-511E-4977-B029-70277C68E24D"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "47478166-EE66-4837-A6C0-0A519F9EDD26"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C4E8E909-3277-429B-9CB2-973A606BB4A8"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D1F0F0C4-0008-452E-99F5-6264465C3FFC"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E554FA7F-4F54-4BDD-80EB-0566805D995B"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A48CD244-BCF6-4D0F-B07D-44304493BCFD"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "86A84BB0-85D3-47E8-BC90-291E8C2CCEEC"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "37283AD4-4B3F-48AB-A3DD-C33871CCB5DA"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "85C3571E-43F0-41D3-840F-A811B88FFFC1"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D1D97472-841C-471C-8668-AF96A41A1B7F"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "83BEA317-8DD4-4C4D-ADD1-17EA314F31DD"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:11.0.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "78D35D0E-E63A-4495-8318-45177838A40C"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DDDDFD6D-1CEF-42E6-9FB4-BFA3DE675CA3",
              "versionEndIncluding": "11.0.13"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:11.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2643209D-1A36-4E2F-836A-0521F6932A99"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:11.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "51C67ABD-5800-46DD-9E81-2A586698BC90"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:11.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F9FF4675-A9FF-4B0F-BBC6-D29B6324D27D"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:11.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "76CE9DE1-FFB6-483B-A76C-38819C1407B9"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:11.0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AA71918B-F2B2-442B-AA12-3E16759B0674"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:11.0.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "15ACC0AD-EFB5-4C96-888A-3E8A1C35E64B"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:11.0.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3BBFA7D7-1A9E-4751-A14A-62C2DB2672A9"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:11.0.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "106D9571-59BF-4056-B7CD-F70FC3F1B73B"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:11.0.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8FD7CF1E-CF36-4291-B17F-67A070CBE2EE"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:11.0.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "71DB447D-5C36-458E-BD07-4FC3CB26FDCE"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:11.0.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "80D16772-02BF-4046-9C47-A25D07DB7F70"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:11.0.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FAF0D04A-B95D-4B50-ACE8-DA3AA6ED7C54"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:11.0.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "812B6806-B488-4D8C-B942-9F3174ECD85D"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C58D9C69-59AC-4C31-8813-DF07C322568E",
              "versionEndIncluding": "15.006.30097"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "000C0EBD-E41C-471E-B71A-5CD418594EF5",
              "versionEndIncluding": "15.009.20077"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "91134715-4C87-4F5A-9B5A-11A6B66ED00A",
              "versionEndIncluding": "15.006.30097"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C4B9A613-9E00-4D4E-8780-471E913CA60D",
              "versionEndIncluding": "15.009.20077"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "evaluatorComment": "<a href=\"http://cwe.mitre.org/data/definitions/416.html\">CWE-416: Use After Free</a>",
  "sourceIdentifier": "psirt@adobe.com"
}