CVE-2016-0934 is a use-after-free vulnerability in the AGM.dll component of Adobe Reader and Acrobat, affecting various versions across Windows and OS X. This flaw allows attackers to execute arbitrary code by enticing a user to open a specially crafted, multiple-layer PDF document. With a CVSS score of 8.8 (HIGH), it presents a significant risk due to its network-based attack vector, low attack complexity, and high potential for confidentiality, integrity, and availability compromise. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, indicating awareness within the security landscape.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 11.0.13CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:* | ||
11.0.0CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_reader:11.0.0:*:*:*:*:*:*:* | ||
11.0.1CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_reader:11.0.1:*:*:*:*:*:*:* | ||
11.0.2CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_reader:11.0.2:*:*:*:*:*:*:* | ||
11.0.3CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_reader:11.0.3:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.