Product:
Adobe Reader and Acrobat
Summary
Adobe Reader and Acrobat versions before 9.5.5, 10.1.7, and 11.0.03 allow attackers to execute arbitrary code or cause a denial of service due to memory corruption via unspecified vectors. This vulnerability is distinct from several other CVEs. It poses a significant risk to users of these applications.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.8 | CVE-2013-3346 |
Exploitation
To exploit this vulnerability, an attacker can craft a malicious PDF file that, when opened by a vulnerable version of Adobe Reader or Acrobat, triggers memory corruption. This can lead to arbitrary code execution or a denial of service, allowing the attacker to gain control over the affected system or disrupt its normal operation.
Affected Products
- Adobe Reader 9.x before 9.5.5
- Adobe Reader 10.x before 10.1.7
- Adobe Reader 11.x before 11.0.03
- Adobe Acrobat 9.x before 9.5.5
- Adobe Acrobat 10.x before 10.1.7
- Adobe Acrobat 11.x before 11.0.03
Mitigation
Users are advised to apply updates as per the vendor’s instructions to mitigate this vulnerability. Keeping software up to date is crucial in protecting against known vulnerabilities.