CVE-2020-3745

Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have an…

published February 13, 2020

CVSS
—
EPSS
5%
Percentile
92.0
In the wild
Unconfirmed
What it is

🚨 A classic "use after free" vulnerability could spell trouble in Adobe Acrobat and Reader prior to specific versions! 🤓 Think of it like serving leftovers without realizing they've gone bad — you could end up with a nasty surprise. In this case, the software continues to reference memory that’s already been reclaimed, just waiting for a crafty attacker to take control of your system! If exploited, this vulnerability allows attackers to execute arbitrary code, potentially leading to full control over your system. We're talking unauthorized access to sensitive data, installation of malicious software, and other absolutely devastating consequences if you're not careful!

Put simply

Think of it like serving leftovers without realizing they've gone bad — you could end up with a nasty surprise. In this case, the software continues to reference memory that’s already been reclaimed, just waiting for a crafty attacker to take control of your system! This vulnerability arises from improper memory management in Adobe Acrobat and Reader, where the application uses memory that has already been freed, creating an opportunity for attackers to inject malicious code during runtime.

What to do

If exploited, this vulnerability allows attackers to execute arbitrary code, potentially leading to full control over your system. We're talking unauthorized access to sensitive data, installation of malicious software, and other absolutely devastating consequences if you're not careful! To protect yourself, make sure to update Adobe Acrobat and Reader to the latest versions: 2019.021.20062 or later, 2017.011.30157 or later, and 2015.006.30509 or later. Regularly check for updates to stay ahead of potential threats! You've got this! Stay proactive and keep your software updated to maintain your security hero status! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04853 · 92.0th percentile
Published
2020-02-13T15:47Z
EPSS history
Timeline
  • 13 FEB 15:47Z
    Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have an…
    cvelistv5