CVE-2014-0560

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and OS X allows attackers to execute arbitrary…

published September 17, 2014

CVSS
—
EPSS
7%
Percentile
93.8
In the wild
Unconfirmed
What it is

⚠️ A sneaky use-after-free vulnerability lurks in Adobe Reader and Acrobat versions before 10.1.12 and 11.0.09, potentially paving the way for attackers to execute arbitrary code! 🔥 Think of this vulnerability like a library that doesn't properly check which books are currently checked out — if someone returns a book but the library still thinks it's in use, they could sneak in and replace it with a fake one that does some serious mischief! 📚 If exploited, this vulnerability could allow attackers to run malicious code on the victim's system, leading to unauthorized access to files, data theft, or even a complete system takeover. The implications can be absolutely devastating, especially if sensitive information is involved!

Put simply

Think of this vulnerability like a library that doesn't properly check which books are currently checked out — if someone returns a book but the library still thinks it's in use, they could sneak in and replace it with a fake one that does some serious mischief! 📚 The use-after-free vulnerability occurs when a program frees a memory location but continues to access it, allowing an attacker to manipulate the code that executes during this operation. This can be triggered through unspecified vectors, making it a stealthy threat.

What to do

If exploited, this vulnerability could allow attackers to run malicious code on the victim's system, leading to unauthorized access to files, data theft, or even a complete system takeover. The implications can be absolutely devastating, especially if sensitive information is involved! To protect yourself, ensure you're using Adobe Reader and Acrobat version 10.1.12 or later, or 11.0.09 and later. Regularly check for updates and consider disabling JavaScript in the application as an extra precaution. Stay vigilant! You've got this! Stay updated and you'll keep your system secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06652 · 93.8th percentile
Published
2014-09-17T10:00Z
EPSS history
Timeline
  • 17 SEP 10:00Z
    Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and OS X allows attackers to execute arbitrary…
    cvelistv5