Palo Alto Networks Discovers Two Adobe Reader Privileged Java Script Zero-Days
Unit 42 at Palo Alto Networks discovered two zero-day vulnerabilities in Adobe Reader, CVE-2016-6957 and CVE-2016-6958, which Adobe patched on October 6, 2016. The flaws let attackers bypass restrictions on JavaScript API execution and on arbitrary script...