CVE-2013-3346KEV · OVERDUE

Adobe Reader and Acrobat Memory Corruption Vulnerability

High · published August 30, 2013

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 8.8. It is confirmed in active exploitation. It sits in the 99.6th percentile for exploit probability.

1674
days past CISA
deadline
CVSS v3.1
8.8
EPSS
79%
Percentile
99.6
In the wild
Confirmed
What it is

🚨 A memory corruption vulnerability in Adobe Reader could let attackers execute code with just a simple document! ⚡ Think of it like a restaurant where the chef accidentally leaves a secret door unlocked—anyone can saunter in and mess with the main course, leading to a disastrous dinner service. 🍽️ This flaw can lead to remote code execution, allowing attackers to take control of your system, steal sensitive information, or even crash the application altogether—absolutely devastating for anyone relying on Adobe products. Picture the chaos as an entire office suddenly finds their documents inaccessible!

Put simply

Think of it like a restaurant where the chef accidentally leaves a secret door unlocked—anyone can saunter in and mess with the main course, leading to a disastrous dinner service. 🍽️ Adobe Reader and Acrobat versions before 9.5.5, 10.1.7, and 11.0.03 are vulnerable to arbitrary code execution due to unspecified vectors that can cause memory corruption. This enables attackers to run malicious code on the host system.

What to do

This flaw can lead to remote code execution, allowing attackers to take control of your system, steal sensitive information, or even crash the application altogether—absolutely devastating for anyone relying on Adobe products. Picture the chaos as an entire office suddenly finds their documents inaccessible! Update your Adobe Reader and Acrobat to version 9.5.5 or later, 10.1.7 or later, or 11.0.03 or later immediately to patch this vulnerability. Regularly review your software for updates to minimize the risk of exploitation. You've got this! Just follow these steps to tighten your defenses and keep your data safe. 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.78913 · 99.6th percentile
Published
2013-08-30T20:00Z
KEV added
2022-03-03 · due 2022-03-24
EPSS history
Timeline
  • 03 MAR 00:00Z
    Added to CISA KEV — remediate by Mar 24
    kev
  • 30 AUG 20:00Z
    Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service…
    cvelistv5