CVE-2013-3341

Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service…

published May 16, 2013

CVSS
—
EPSS
6%
Percentile
92.8
In the wild
Unconfirmed
What it is

⚠️ A sneaky memory corruption flaw could let attackers run arbitrary code in Adobe Reader and Acrobat versions before 9.5.5, 10.1.7, and 11.0.03! 😱 Think of this vulnerability like a cook who accidentally mixes an ingredient that was never supposed to be in the recipe, potentially ruining the entire dish — or worse, making diners ill! An attacker could exploit this flaw to execute arbitrary code, causing havoc on the affected system. This could lead to unauthorized access, data breaches, or even a complete denial of service, making your documents go dark when you need them most!

Put simply

Think of this vulnerability like a cook who accidentally mixes an ingredient that was never supposed to be in the recipe, potentially ruining the entire dish — or worse, making diners ill! This vulnerability allows for memory corruption through unspecified vectors, which could enable an attacker to run their own malicious code when a user opens a specially crafted PDF file.

What to do

An attacker could exploit this flaw to execute arbitrary code, causing havoc on the affected system. This could lead to unauthorized access, data breaches, or even a complete denial of service, making your documents go dark when you need them most! Update Adobe Reader and Acrobat to the latest versions: 9.5.5, 10.1.7, or 11.0.03 or later. Regularly check for updates to ensure you have the latest security patches applied! You've got this! Follow these steps to keep your system safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05582 · 92.8th percentile
Published
2013-05-16T10:00Z
EPSS history
Timeline
  • 16 MAY 10:00Z
    Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service…
    cvelistv5