Product:
Adobe Reader and Acrobat
Summary
A use-after-free vulnerability exists in Adobe Reader and Acrobat 10.x prior to 10.1.9 and 11.x prior to 11.0.06 on Windows and Mac OS X. This vulnerability allows attackers to execute arbitrary code through unspecified vectors. The issue poses significant risks to users of the affected products.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.8 | CVE-2014-0496 |
Exploitation
To exploit this vulnerability, an attacker can craft a malicious PDF file that triggers the use-after-free condition when opened in the affected versions of Adobe Reader or Acrobat. By convincing a user to open this file, the attacker can execute arbitrary code on the user’s system, potentially leading to complete system compromise.
Affected Products
- Adobe Reader 10.x before 10.1.9
- Adobe Reader 11.x before 11.0.06
- Adobe Acrobat 10.x before 10.1.9
- Adobe Acrobat 11.x before 11.0.06
Mitigation
Users are advised to apply updates as per the vendor’s instructions to mitigate the risks associated with this vulnerability. Keeping software up to date is crucial in protecting against potential exploits.