CVE-2010-3628

Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service…

published October 6, 2010

CVSS
—
EPSS
6%
Percentile
93.0
In the wild
Unconfirmed
What it is

🚨 A sneaky gap lets attackers execute code or cause crashes in Adobe Reader and Acrobat versions 9.x and 8.x! ⚠️ Think of it like a mail room that accepts any package without checking the contents — if a bad package arrives, it could wreak havoc on the entire office! If exploited, an attacker could execute arbitrary code, leading to unauthorized actions on your machine or crashing the application altogether. This could put sensitive data at risk and disrupt your workflow, which is absolutely devastating!

Put simply

Think of it like a mail room that accepts any package without checking the contents — if a bad package arrives, it could wreak havoc on the entire office! This vulnerability stems from memory corruption in Adobe Reader and Acrobat, allowing attackers to manipulate the application through unspecified vectors, leading to potential remote code execution or denial of service.

What to do

If exploited, an attacker could execute arbitrary code, leading to unauthorized actions on your machine or crashing the application altogether. This could put sensitive data at risk and disrupt your workflow, which is absolutely devastating! Upgrade to Adobe Reader and Acrobat 9.4 or 8.2.5 or later immediately to patch this vulnerability. Regularly check for updates and consider disabling JavaScript in PDF files if possible to minimize risk. You've got this! Stay proactive with your security updates and you'll keep your systems safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05707 · 93.0th percentile
Published
2010-10-06T16:00Z
EPSS history
Timeline
  • 06 OCT 16:00Z
    Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service…
    cvelistv5