CVE-2013-0602

Use-after-free vulnerability in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary…

published January 10, 2013

CVSS
—
EPSS
8%
Percentile
94.8
In the wild
Unconfirmed
What it is

⚠️ A use-after-free vulnerability lurks in Adobe Reader and Acrobat versions before 9.5.3, 10.1.5, and 11.0.1, potentially letting attackers run arbitrary code! Think of it like a restaurant that throws away the old recipe but still has customers order from it — chaos ensues when the chef tries to whip up a dish that doesn't exist anymore. In this case, the software is trying to use something that's already been deleted, leading to unexpected consequences! An attacker exploiting this vulnerability could execute arbitrary code on the victim's system, potentially accessing sensitive information or causing harm. The implications could range from gaining unauthorized access to the system all the way to controlling the entire machine!

Put simply

Think of it like a restaurant that throws away the old recipe but still has customers order from it — chaos ensues when the chef tries to whip up a dish that doesn't exist anymore. In this case, the software is trying to use something that's already been deleted, leading to unexpected consequences! The use-after-free flaw occurs when the software continues to use memory that has already been released, which can be manipulated by attackers to run malicious code.

What to do

An attacker exploiting this vulnerability could execute arbitrary code on the victim's system, potentially accessing sensitive information or causing harm. The implications could range from gaining unauthorized access to the system all the way to controlling the entire machine! Update Adobe Reader and Acrobat immediately to versions 9.5.3, 10.1.5, and 11.0.1 or later. Regularly monitor and apply patches as they become available to keep your systems secure. You've got this! By taking these steps, you’ll help keep your systems safe and secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07991 · 94.8th percentile
Published
2013-01-10T11:00Z
EPSS history
Timeline
  • 10 JAN 11:00Z
    Use-after-free vulnerability in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary…
    cvelistv5