CVE-2020-3751

Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have an…

published February 13, 2020

CVSS
β€”
EPSS
5%
Percentile
92.0
In the wild
Unconfirmed
What it is

⚠️ A sneaky use-after-free vulnerability lurks in Adobe Acrobat and Reader, affecting versions up to 2019.021.20061! 🚨 Think of it as getting a ticket to a concert, but after the show ends, the venue still lets you in, only to find it's empty β€” that's what happens when the memory management goes awry! If exploited, an attacker could execute arbitrary code on your system, transforming your trusted PDF viewer into a gateway for chaos. Imagine your computer acting on commands you never intended β€” not exactly the kind of surprise you want!

Put simply

Think of it as getting a ticket to a concert, but after the show ends, the venue still lets you in, only to find it's empty β€” that's what happens when the memory management goes awry! This vulnerability allows memory to be accessed after it has been freed, making it possible for attackers to run their own code with the same privileges as the user. It's like finding a way to slip through a door that should've been locked tight!

What to do

If exploited, an attacker could execute arbitrary code on your system, transforming your trusted PDF viewer into a gateway for chaos. Imagine your computer acting on commands you never intended β€” not exactly the kind of surprise you want! To mitigate this risk, update Adobe Acrobat and Reader to version 2019.021.20062 or later. Regularly check for updates and consider enabling automatic updates to stay protected! πŸ›‘οΈ You've got this! With these updates, your software will be shielded from sneaky vulnerabilities like this one! 😊

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04853 Β· 92.0th percentile
Published
2020-02-13T15:45Z
EPSS history
Timeline
  • 13 FEB 15:45Z
    Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have an…
    cvelistv5