CVE-2014-8458

Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service…

published December 10, 2014

CVSS
—
EPSS
9%
Percentile
95.2
In the wild
Unconfirmed
What it is

⚡ An unspecified vulnerability lurking in Adobe Reader and Acrobat could let an attacker execute arbitrary code like a magician pulling a rabbit out of a hat! 🎩🐇 Think of Adobe Reader as a movie theater where someone can sneak in a film reel of their choice without anyone checking. If the projector plays the wrong movie, it could lead to chaos in the audience! An attacker could potentially execute malicious code, leading to unauthorized access to sensitive data, or even cause a complete denial of service, crashing the application on unsuspecting users. This puts your documents—and possibly your system—at serious risk!

Put simply

Think of Adobe Reader as a movie theater where someone can sneak in a film reel of their choice without anyone checking. If the projector plays the wrong movie, it could lead to chaos in the audience! This vulnerability in Adobe Reader and Acrobat allows attackers to exploit memory corruption issues, leading to arbitrary code execution or application crashes via unspecified vectors. It's an underlying weakness in versions prior to 10.1.13 and 11.0.10.

What to do

An attacker could potentially execute malicious code, leading to unauthorized access to sensitive data, or even cause a complete denial of service, crashing the application on unsuspecting users. This puts your documents—and possibly your system—at serious risk! Update Adobe Reader and Acrobat to the latest versions (10.1.13 and 11.0.10 respectively) as soon as possible to close this security gap. Regularly check for updates to ensure you’re protected from newer vulnerabilities. 🛡️ You've got this! Stay proactive and secure your setup with those updates! 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08948 · 95.2th percentile
Published
2014-12-10T21:00Z
EPSS history
Timeline
  • 10 DEC 21:00Z
    Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service…
    cvelistv5