[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2013-0641Date: (C)2013-02-14   (M)2023-12-22


Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 9.3
Exploit Score: 8.6
Impact Score: 10.0
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE
  
Reference:
GLSA-201308-03
IAVM:2013-A-0049
RHSA-2013:0551
SUSE-SU-2013:0349
VU#422807
http://blog.fireeye.com/research/2013/02/in-turn-its-pdf-time.html
http://blogs.adobe.com/psirt/2013/02/adobe-reader-and-acrobat-vulnerability-report.html
http://blogs.mcafee.com/mcafee-labs/digging-into-the-sandbox-escape-technique-of-the-recent-pdf-exploit
http://www.adobe.com/support/security/advisories/apsa13-02.html
http://www.adobe.com/support/security/bulletins/apsb13-07.html
openSUSE-SU-2013:0335
openSUSE-SU-2013:0342
oval:org.mitre.oval:def:16296

CPE    87
cpe:/a:adobe:acrobat:10.0.2
cpe:/a:adobe:acrobat:10.0.3
cpe:/a:adobe:acrobat:10.0.1
cpe:/a:adobe:acrobat_reader:10.0.1
...
OVAL    13
oval:org.secpod.oval:def:9825
oval:org.secpod.oval:def:9824
oval:org.secpod.oval:def:9826
oval:org.secpod.oval:def:400489
...

© SecPod Technologies