CVE-2013-2718

Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service…

published May 16, 2013

CVSS
—
EPSS
5%
Percentile
91.5
In the wild
Unconfirmed
What it is

⚠️ A memory corruption vulnerability in Adobe Reader could allow an attacker to execute arbitrary code without anyone knowing — like a sneaky guest in your home who rearranges your furniture while you’re not looking! Think of Adobe Reader and Acrobat as your digital library where documents are kept safe. If someone can get in and mess with the shelves, they could not only rearrange your books but also swap out some for dangerous ones, leading to chaos! An attacker could exploit this vulnerability to take control of the system, potentially gaining access to sensitive data or crashing the application altogether. It’s like giving someone the keys to your house only for them to turn it upside down or steal everything!

Put simply

Think of Adobe Reader and Acrobat as your digital library where documents are kept safe. If someone can get in and mess with the shelves, they could not only rearrange your books but also swap out some for dangerous ones, leading to chaos! This vulnerability allows an attacker to execute arbitrary code or cause a denial of service by exploiting a memory corruption flaw present in various versions of Adobe Reader and Acrobat. This issue exists due to unspecified vectors which are yet to be disclosed.

What to do

An attacker could exploit this vulnerability to take control of the system, potentially gaining access to sensitive data or crashing the application altogether. It’s like giving someone the keys to your house only for them to turn it upside down or steal everything! To protect yourself, upgrade your Adobe Reader and Acrobat to version 9.5.5, 10.1.7, or 11.0.03 or later. Regularly check for updates and consider disabling JavaScript in your PDF settings to further reduce risk. You've got this! Keep your software updated, and you'll be well on your way to securing your digital library! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04552 · 91.5th percentile
Published
2013-05-16T10:00Z
EPSS history
Timeline
  • 16 MAY 10:00Z
    Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service…
    cvelistv5