CVE-2013-3339

Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service…

published May 16, 2013

CVSS
—
EPSS
6%
Percentile
92.9
In the wild
Unconfirmed
What it is

🚨 A sneaky gap in Adobe Reader and Acrobat could let attackers run wild, executing arbitrary code like a magician pulling rabbits out of a hat! 🔥 Think of it like a barista who hands out free drinks without checking the orders — anyone can walk in and get what they want, possibly leading to chaos! If exploited, this vulnerability could lead to arbitrary code execution or cause the application to crash, resulting in a denial of service. This means attackers could take control of your system or render your PDF software useless, disrupting your workflow and compromising your data.

Put simply

Think of it like a barista who hands out free drinks without checking the orders — anyone can walk in and get what they want, possibly leading to chaos! Adobe Reader and Acrobat versions before 9.5.5, 10.1.7, and 11.0.03 contain unspecified vulnerabilities that could allow attackers to execute code remotely or cause memory corruption, posing a significant risk to users.

What to do

If exploited, this vulnerability could lead to arbitrary code execution or cause the application to crash, resulting in a denial of service. This means attackers could take control of your system or render your PDF software useless, disrupting your workflow and compromising your data. Update Adobe Reader and Acrobat to the latest versions (9.5.5, 10.1.7, or 11.0.03 and beyond) to patch this vulnerability. Regularly checking for updates can help you stay protected from similar issues in the future. You've got this! Stay vigilant, update your software, and keep your digital world safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05582 · 92.9th percentile
Published
2013-05-16T10:00Z
EPSS history
Timeline
  • 16 MAY 10:00Z
    Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service…
    cvelistv5