CVE-2013-3354

Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service…

published September 11, 2013

CVSS
—
EPSS
5%
Percentile
92.0
In the wild
Unconfirmed
What it is

⚠️ A sneaky memory corruption bug in Adobe Reader and Acrobat can let attackers execute arbitrary code! 🤯 Think of it like a chef who accidentally mixes up the ingredients in a recipe — if they don’t check what was put in, the dish could end up tasting terrible or even be dangerous! This vulnerability could lead to attackers taking control of your system, executing malicious code, or crashing your software entirely, leaving you in quite a pickle! Imagine opening a document only for it to unleash chaos instead of information!

Put simply

Think of it like a chef who accidentally mixes up the ingredients in a recipe — if they don’t check what was put in, the dish could end up tasting terrible or even be dangerous! Adobe Reader and Acrobat prior to versions 10.1.8 and 11.0.04 on Windows and Mac OS X are vulnerable to arbitrary code execution or memory corruption due to unspecified vectors, allowing attackers to bypass security controls.

What to do

This vulnerability could lead to attackers taking control of your system, executing malicious code, or crashing your software entirely, leaving you in quite a pickle! Imagine opening a document only for it to unleash chaos instead of information! Update Adobe Reader and Acrobat to the latest versions (10.1.8 or newer, 11.0.04 or newer) immediately. Regularly check for updates and consider enabling automatic updates to stay protected! 🛡️ You've got this! Stay proactive and keep your software up to date! 🌟

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04837 · 92.0th percentile
Published
2013-09-11T23:00Z
EPSS history
Timeline
  • 11 SEP 23:00Z
    Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service…
    cvelistv5