CVE-2014-9161

CoolType.dll in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows, and 10.x through 10.1.13 and 11.x through 11.0.10 on OS X…

published January 30, 2015

CVSS
β€”
EPSS
4%
Percentile
90.5
In the wild
Unconfirmed
What it is

⚠️ An attacker can trigger a denial of service just by sending a crafty PDF! Adobe Reader and Acrobat versions prior to 10.1.13 and 11.0.10 are vulnerable, making this a surprisingly sneaky issue. πŸ“„πŸ’₯ Think of it like a restaurant that serves a dish with an allergic ingredient, but the chef never checks the orders. One wrong PDF could leave your system in shambles, just like a diner struggling to breathe! If a malicious PDF gets through, it could lead to an out-of-bounds read β€” essentially making your Adobe software stop responding. While it might not compromise sensitive data, it could disrupt your work and annoy users with unexpected crashes.

Put simply

Think of it like a restaurant that serves a dish with an allergic ingredient, but the chef never checks the orders. One wrong PDF could leave your system in shambles, just like a diner struggling to breathe! This vulnerability in CoolType.dll allows attackers to create specially crafted PDF documents that may cause Adobe Reader and Acrobat to enter a denial of service state due to out-of-bounds read issues.

What to do

If a malicious PDF gets through, it could lead to an out-of-bounds read β€” essentially making your Adobe software stop responding. While it might not compromise sensitive data, it could disrupt your work and annoy users with unexpected crashes. Update Adobe Reader and Acrobat to the latest versions β€” 10.1.13 and 11.0.10 or higher. Regularly verify your software updates to keep all applications secure and functioning smoothly! You've got this! Embrace your inner security hero and patch up those vulnerabilities! πŸ¦Έβ€β™‚οΈπŸ’ͺ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04051 Β· 90.5th percentile
Published
2015-01-30T11:00Z
EPSS history
Timeline
  • 30 JAN 11:00Z
    CoolType.dll in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows, and 10.x through 10.1.13 and 11.x through 11.0.10 on OS X…
    cvelistv5