CVE-2014-0514

The Adobe Reader Mobile application before 11.2 for Android does not properly restrict use of JavaScript, which allows remote attackers to execute arbitrary…

published April 15, 2014

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.4th percentile for exploit probability.

CVSS
—
EPSS
72%
Percentile
99.4
In the wild
Unconfirmed
What it is

⚠️ A crafty crafted PDF can run JavaScript without restraint! Adobe Reader Mobile for Android versions before 11.2 have a sneaky flaw that lets attackers execute arbitrary code. 😱 Think of it as a restaurant that allows customers to substitute ingredients without checking if they’re safe; you might end up with something unexpected on your plate! In this case, an attacker could insert harmful scripts into a seemingly innocent PDF. This vulnerability could lead to remote code execution, meaning an attacker could potentially take control of your device just by you opening a specially crafted PDF document. It's like having someone sneak into your home through an unguarded side door, allowing them to wreak havoc. The implications could be devastating if this goes unchecked!

Put simply

Think of it as a restaurant that allows customers to substitute ingredients without checking if they’re safe; you might end up with something unexpected on your plate! In this case, an attacker could insert harmful scripts into a seemingly innocent PDF. The Adobe Reader Mobile application doesn't properly restrict JavaScript usage, allowing remote attackers to exploit the application through crafted PDF files, similar to an earlier related issue (CVE-2012-6636).

What to do

This vulnerability could lead to remote code execution, meaning an attacker could potentially take control of your device just by you opening a specially crafted PDF document. It's like having someone sneak into your home through an unguarded side door, allowing them to wreak havoc. The implications could be devastating if this goes unchecked! To safeguard your Android device, ensure you update Adobe Reader Mobile to version 11.2 or later to patch this vulnerability. Additionally, consider disabling JavaScript in the app settings if you don’t need it for added security. Staying up to date on apps is key! You've got this! By following these steps, you'll strengthen your defenses against sneaky exploits. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.72102 · 99.4th percentile
Published
2014-04-15T20:00Z
EPSS history
Timeline
  • 15 APR 20:00Z
    The Adobe Reader Mobile application before 11.2 for Android does not properly restrict use of JavaScript, which allows remote attackers to execute arbitrary…
    cvelistv5