CVE-2016-1008
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Adobe Acrobat DC等都是美国奥多比（Adobe）公司的产品。Acrobat DC是一套桌面版PDF解决方案；Acrobat Reader DC是一套用于查看、打印和批注PDF的工具。Classic和Continuous是Acrobat DC和Acrobat Reader DC产品下载中心所提供的两种更新机制。 多款Adobe产品中存在安全漏洞，该漏洞源于程序没有正确初始化手势属性。远程攻击者可利用该漏洞执行任意代码。以下产品及版本受到影响：基于Windows和Macintosh平台的Adob
Possible ATT&CK Techniques 1 AI
T1574 · Hijack Execution Flow
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2016-1008
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Untrusted search path vulnerability in Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat Reader DC Classic before 15.006.30121, and Acrobat and Acrobat Reader DC Continuous before 15.010.20060 on Windows and OS X allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
多款Adobe产品任意代码执行漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Adobe Acrobat DC等都是美国奥多比（Adobe）公司的产品。Acrobat DC是一套桌面版PDF解决方案；Acrobat Reader DC是一套用于查看、打印和批注PDF的工具。Classic和Continuous是Acrobat DC和Acrobat Reader DC产品下载中心所提供的两种更新机制。 多款Adobe产品中存在安全漏洞，该漏洞源于程序没有正确初始化手势属性。远程攻击者可利用该漏洞执行任意代码。以下产品及版本受到影响：基于Windows和Macintosh平台的Adob
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2016-1008
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2016-1008
请登录查看更多情报信息。
Vendor Advisories for CVE-2016-1008 (4)
-
http://www.zerodayinitiative.com/advisories/ZDI-16-190 x_refsource_MISC
-
https://helpx.adobe.com/security/products/acrobat/apsb16-09.html x_refsource_CONFIRM
-
-
Same Patch Batch · n/a · 2016-03-09 · 53 CVEs total
| CVE-2016-0116 | Microsoft Edge 内存损坏漏洞 | |
| CVE-2016-1009 | 多款Adobe产品任意代码执行漏洞 | |
| CVE-2016-1007 | 多款Adobe产品任意代码执行漏洞 | |
| CVE-2016-0130 | Microsoft Edge 内存损坏漏洞 | |
| CVE-2016-0134 | Microsoft Office 内存损坏漏洞 | |
| CVE-2016-0133 | Microsoft Windows USB大容量存储特权提升漏洞 | |
| CVE-2016-0132 | Microsoft .NET Framework XML验证安全功能绕过漏洞 | |
| CVE-2016-0954 | Adobe Digital Editions 安全漏洞 | |
| CVE-2016-0118 | Microsoft Windows 远程执行代码漏洞 | |
| CVE-2016-0117 | Microsoft Windows 远程执行代码漏洞 | |
| CVE-2016-0120 | Microsoft Windows OpenType字体分析漏洞 | |
| CVE-2016-0114 | Microsoft Internet Explorer 内存损坏漏洞 | |
| CVE-2016-0113 | Microsoft Internet Explorer 内存损坏漏洞 | |
| CVE-2016-0112 | Microsoft Internet Explorer 内存损坏漏洞 | |
| CVE-2016-0111 | Microsoft浏览器内存损坏漏洞 | |
| CVE-2016-0110 | Microsoft浏览器内存损坏漏洞 | |
| CVE-2016-0109 | Microsoft浏览器内存损坏漏洞 | |
| CVE-2016-0108 | Microsoft Internet Explorer 内存损坏漏洞 | |
| CVE-2016-0107 | Microsoft Internet Explorer 内存损坏漏洞 | |
| CVE-2016-0106 | Microsoft Internet Explorer 内存损坏漏洞 |
Showing top 20 of 53 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2016-1008
No comments yet