CVE-2020-3795

Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and…

published March 25, 2020

CVSS
—
EPSS
4%
Percentile
91.0
In the wild
Unconfirmed
What it is

🚨 An out-of-bounds write in Adobe Acrobat could let an attacker slip in unwanted code like a surprise guest crashing a party! 🎉 Think of it as a restaurant accepting an order for a dish that goes beyond its menu—if the chef isn't careful, they might serve something completely off-the-wall! If exploited, this vulnerability could allow an attacker to execute arbitrary code on a user's machine, potentially leading to a complete system takeover. Imagine losing control of your kitchen just because someone slipped in a strange recipe!

Put simply

Think of it as a restaurant accepting an order for a dish that goes beyond its menu—if the chef isn't careful, they might serve something completely off-the-wall! This out-of-bounds write vulnerability allows an attacker to manipulate memory beyond the intended limits, which could lead to arbitrary code execution in affected versions of Adobe Acrobat and Reader.

What to do

If exploited, this vulnerability could allow an attacker to execute arbitrary code on a user's machine, potentially leading to a complete system takeover. Imagine losing control of your kitchen just because someone slipped in a strange recipe! To mitigate this risk, upgrade to the latest version of Adobe Acrobat or Reader immediately. Ensure to regularly check for updates to stay protected against future vulnerabilities as well! You've got this! Stay vigilant and keep your software updated to protect your digital kitchen! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04222 · 91.0th percentile
Published
2020-03-25T15:58Z
EPSS history
Timeline
  • 25 MAR 15:58Z
    Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and…
    cvelistv5