CVE-2013-2735

Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service…

published May 16, 2013

CVSS
—
EPSS
6%
Percentile
92.9
In the wild
Unconfirmed
What it is

🚨 A memory corruption vulnerability in Adobe Reader and Acrobat means attackers could potentially execute arbitrary code—like a chef tossing in unknown ingredients without checking the recipe! 🍽️ Picture a restaurant where the kitchen doesn’t check the quality of the ingredients they receive. If a chef starts cooking with spoiled items, the results could be disastrous, much like how this vulnerability lets attackers slip in harmful code without detection. If exploited, an attacker could execute arbitrary code, potentially gaining control over your system, or cause a denial of service that leaves your application temporarily unavailable. It's a scenario that can lead to data breaches or service disruptions, which is absolutely devastating!

Put simply

Picture a restaurant where the kitchen doesn’t check the quality of the ingredients they receive. If a chef starts cooking with spoiled items, the results could be disastrous, much like how this vulnerability lets attackers slip in harmful code without detection. This vulnerability affects Adobe Reader and Acrobat versions prior to updates 9.5.5, 10.1.7, and 11.0.03, allowing for memory corruption through unspecified vectors, enabling attackers to execute arbitrary commands.

What to do

If exploited, an attacker could execute arbitrary code, potentially gaining control over your system, or cause a denial of service that leaves your application temporarily unavailable. It's a scenario that can lead to data breaches or service disruptions, which is absolutely devastating! To protect yourself, update Adobe Reader and Acrobat to the latest versions immediately: upgrade to 9.5.5, 10.1.7, or 11.0.03. Regularly check for software updates to stay secure and consider leveraging automated update features. You've got this! Stay vigilant and keep your applications updated for a safer digital experience! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05582 · 92.9th percentile
Published
2013-05-16T10:00Z
EPSS history
Timeline
  • 16 MAY 10:00Z
    Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service…
    cvelistv5