CVE-2020-3752

Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have a…

published February 13, 2020

CVSS
—
EPSS
5%
Percentile
92.5
In the wild
Unconfirmed
What it is

⚠️ A sneaky buffer error in Adobe Acrobat could let attackers run wild! Imagine a document that not only tells you a story but also opens a door for mischief. 🔥 Think of this vulnerability like a buffet with no one watching the food: someone could sneak in and swap out the chef's special for something far less delightful. This buffer error can allow an attacker to serve up arbitrary code execution instead of the intended safe content. If exploited, an attacker could take complete control of your system, executing malicious code and potentially wreaking havoc—stealing sensitive data or even locking you out entirely. This could turn your everyday PDF reader into a gateway for disaster!

Put simply

Think of this vulnerability like a buffet with no one watching the food: someone could sneak in and swap out the chef's special for something far less delightful. This buffer error can allow an attacker to serve up arbitrary code execution instead of the intended safe content. This buffer error in Adobe Acrobat and Reader allows an attacker to manipulate memory allocation, leading to arbitrary code execution. It affects versions 2019.021.20061 and earlier, as well as several earlier releases from 2017 and 2015.

What to do

If exploited, an attacker could take complete control of your system, executing malicious code and potentially wreaking havoc—stealing sensitive data or even locking you out entirely. This could turn your everyday PDF reader into a gateway for disaster! To mitigate this risk, immediately update Adobe Acrobat and Reader to the latest versions. Be vigilant about downloading documents from untrusted sources, and consider implementing endpoint protection solutions to bolster your defenses. You've got this! Stay proactive, follow these steps, and you'll keep your system safe from this vulnerability. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05238 · 92.5th percentile
Published
2020-02-13T15:47Z
EPSS history
Timeline
  • 13 FEB 15:47Z
    Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have a…
    cvelistv5