CVE-2013-3355

Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service…

published September 11, 2013

CVSS
—
EPSS
10%
Percentile
95.5
In the wild
Unconfirmed
What it is

⚠️ A little-known vulnerability in Adobe Reader lets attackers execute arbitrary code—it's like handing your house keys to a stranger! 🔑 Think of this vulnerability as leaving a restaurant’s back door wide open while the cooks are busy preparing food. If someone sneaks in, they could mess with the recipes or even tamper with the kitchen equipment without anyone noticing! This could lead to an attacker running malicious code on your system, potentially compromising sensitive information or causing a denial of service. Users could experience crashes, data loss, or worse—total system chaos!

Put simply

Think of this vulnerability as leaving a restaurant’s back door wide open while the cooks are busy preparing food. If someone sneaks in, they could mess with the recipes or even tamper with the kitchen equipment without anyone noticing! Specifically, Adobe Reader and Acrobat versions before 10.1.8 and 11.x before 11.0.04 are vulnerable due to memory corruption, allowing for arbitrary code execution or denial of service through unspecified vectors.

What to do

This could lead to an attacker running malicious code on your system, potentially compromising sensitive information or causing a denial of service. Users could experience crashes, data loss, or worse—total system chaos! Make sure to update Adobe Reader and Acrobat to the latest versions for Windows and Mac OS X. Regularly check for updates to avoid exposing your system to such vulnerabilities in the future. This is fixable! Update those Adobe applications, and you'll be back to reading PDFs securely in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09838 · 95.5th percentile
Published
2013-09-11T23:00Z
EPSS history
Timeline
  • 11 SEP 23:00Z
    Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service…
    cvelistv5