CVE-2011-0602

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code…

published February 10, 2011

CVSS
—
EPSS
7%
Percentile
94.3
In the wild
Unconfirmed
What it is

⚠️ A JPEG2000 image can become your worst enemy! This vulnerability allows remote attackers to execute arbitrary code through a crafted JP2K record in Adobe Reader and Acrobat on both Windows and Mac OS X. 🔥 Think of it like a sneaky delivery driver who hands you a seemingly harmless package—but inside, there’s a mischievous surprise that can wreak havoc in your home! 🍕 An attacker could exploit this vulnerability to run malicious code on your system, potentially leading to everything from data theft to complete system takeover. It's like inviting an unwelcome guest who can mess up your entire house party! 🎉

Put simply

Think of it like a sneaky delivery driver who hands you a seemingly harmless package—but inside, there’s a mischievous surprise that can wreak havoc in your home! 🍕 This vulnerability stems from improper handling of JP2K records, causing heap corruption in Adobe Reader and Acrobat versions before the latest patches. Essentially, it's a flaw that lets attackers trick the software into executing harmful commands.

What to do

An attacker could exploit this vulnerability to run malicious code on your system, potentially leading to everything from data theft to complete system takeover. It's like inviting an unwelcome guest who can mess up your entire house party! 🎉 To safeguard your systems, update Adobe Reader and Acrobat to the latest versions (10.0.1 for 10.x, 9.4.2 for 9.x, and 8.2.6 for 8.x) immediately. Always practice caution when opening PDF files from untrusted sources! 🛡️ You’ve got this! Stay vigilant and keep your software up to date—you're on the path to being a security hero! 💪

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07221 · 94.3th percentile
Published
2011-02-10T17:00Z
EPSS history
Timeline
  • 10 FEB 17:00Z
    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code…
    cvelistv5