CVE-2013-2729

Adobe Reader and Acrobat suffered an arbitrary integer overflow vulnerability allowing remote code execution.

This unpatched vulnerability in Adobe Reader and Acrobat allowed attackers to execute arbitrary remote code, directly enabling ransomware and other malware. DIB organizations must ensure all Adobe products are patched to prevent exploitation and maintain compliance with NIST 800-171 requirements for vulnerability management.

Shame score — The vulnerability remained unpatched for years and was actively exploited in the wild, demonstrating severe negligence in Adobe's vulnerability management program.