CVE-2013-0622

Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to bypass intended access restrictions via unspecified…

published January 10, 2013

CVSS
—
EPSS
6%
Percentile
93.0
In the wild
Unconfirmed
What it is

⚠️ A sneaky vector in Adobe Reader and Acrobat could let attackers bypass access restrictions like a clever guest sneaking into a VIP lounge — they just need to know the right tricks! 🔍 Think of it as leaving a back door slightly ajar in a secure building. Though the main entrance has strict access controls, this overlooked route can grant unwanted visitors entry without proper clearance. An attacker leveraging this vulnerability could potentially access sensitive information they shouldn't be able to see, leading to a breach of privacy and data integrity. While there's no evidence of exploitation yet, the risk remains a point of concern for users.

Put simply

Think of it as leaving a back door slightly ajar in a secure building. Though the main entrance has strict access controls, this overlooked route can grant unwanted visitors entry without proper clearance. This vulnerability allows unauthorized access by bypassing intended access restrictions in certain versions of Adobe Reader and Acrobat. It is specifically present in versions prior to 9.5.3, 10.1.5, and 11.0.1.

What to do

An attacker leveraging this vulnerability could potentially access sensitive information they shouldn't be able to see, leading to a breach of privacy and data integrity. While there's no evidence of exploitation yet, the risk remains a point of concern for users. Update your Adobe Reader and Acrobat to version 9.5.3, 10.1.5, or 11.0.1 to patch this vulnerability. Regularly check for software updates to ensure your applications remain secure. You've got this! Stay vigilant and keep your software updated for a safer experience. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05682 · 93.0th percentile
Published
2013-01-10T11:00Z
EPSS history
Timeline
  • 10 JAN 11:00Z
    Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to bypass intended access restrictions via unspecified…
    cvelistv5