CVE-2013-2736

Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service…

published May 16, 2013

CVSS
—
EPSS
6%
Percentile
92.8
In the wild
Unconfirmed
What it is

⚠️ An unspecified vector is the wild card here! Adobe Reader and Acrobat versions before 9.5.5, 10.1.7, and 11.0.03 are open to arbitrary code execution—like leaving the door ajar for an uninvited guest! Think of this as a restaurant where the chef accepts orders without verifying them. If a mischievous diner slips in a wrong order, they could end up with extra food that wasn’t intended for them—just like attackers could run any code they want! If exploited, this vulnerability could lead to arbitrary code execution or cause denial of service, leaving your documents vulnerable and potentially crashing the application. It's like handing over the keys to your entire kitchen without checking who's at the door!

Put simply

Think of this as a restaurant where the chef accepts orders without verifying them. If a mischievous diner slips in a wrong order, they could end up with extra food that wasn’t intended for them—just like attackers could run any code they want! This vulnerability allows attackers to execute arbitrary code or induce memory corruption in Adobe Reader and Acrobat via unspecified vectors, impacting a range of software versions, including older ones that are still in use.

What to do

If exploited, this vulnerability could lead to arbitrary code execution or cause denial of service, leaving your documents vulnerable and potentially crashing the application. It's like handing over the keys to your entire kitchen without checking who's at the door! To protect yourself, update Adobe Reader and Acrobat to versions 9.5.5, 10.1.7, or 11.0.3 or later. Regularly check for updates and consider implementing strict security policies regarding software usage. You've got this! By staying updated, you're helping to keep the digital world safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05582 · 92.8th percentile
Published
2013-05-16T10:00Z
EPSS history
Timeline
  • 16 MAY 10:00Z
    Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service…
    cvelistv5