CVE-2020-3742

Adobe Acrobat and Reader versions, 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have a…

published February 13, 2020

CVSS
—
EPSS
6%
Percentile
93.1
In the wild
Unconfirmed
What it is

⚠️ A heap overflow vulnerability in Adobe Acrobat could allow attackers to run arbitrary code, just like a waiter accidentally mixing up orders can lead to a disastrous dinner! 🍽️ Think of a heap overflow as a waiter serving dishes that are way too big for the table—if they overflow, it can cause a huge mess, making everything chaotic and allowing unexpected things to happen. If successfully exploited, an attacker could gain control of the system, potentially reading sensitive documents or even executing malicious software. This could lead to serious data breaches or system failures, making it a concerning vulnerability to address.

Put simply

Think of a heap overflow as a waiter serving dishes that are way too big for the table—if they overflow, it can cause a huge mess, making everything chaotic and allowing unexpected things to happen. This heap overflow vulnerability exists in various versions of Adobe Acrobat and Reader, allowing an attacker to manipulate memory and execute arbitrary code, which can compromise system integrity.

What to do

If successfully exploited, an attacker could gain control of the system, potentially reading sensitive documents or even executing malicious software. This could lead to serious data breaches or system failures, making it a concerning vulnerability to address. To mitigate this risk, users should update Adobe Acrobat and Reader to the latest versions immediately. Make sure to check for any patches that address this vulnerability and review your security settings to limit exposure. You've got this! Regular updates and a proactive approach will keep your systems secure. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05798 · 93.1th percentile
Published
2020-02-13T15:07Z
EPSS history
Timeline
  • 13 FEB 15:07Z
    Adobe Acrobat and Reader versions, 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have a…
    cvelistv5