CVE-2013-0640
Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a...
Basic Information
- CVE State
- PUBLISHED
- Reserved Date
- December 18, 2012
- Published Date
- February 14, 2013
- Last Updated
- February 04, 2025
- Vendor
- n/a
- Product
- n/a
- Description
- Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, as exploited in the wild in February 2013.
CVSS Scores
CVSS v3.1
7.8 - HIGH
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
SSVC Information
- Exploitation
- active
- Technical Impact
- total
Exploit Status
- Exploited in the Wild
- Yes (added 2022-03-03 00:00:00 UTC) Source
References
http://blogs.adobe.com/psirt/2013/02/adobe-reader-and-acrobat-vulnerability-report.html
http://www.kb.cert.org/vuls/id/422807
http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00021.html
http://blog.fireeye.com/research/2013/02/in-turn-its-pdf-time.html
http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00023.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16406
http://rhn.redhat.com/errata/RHSA-2013-0551.html
http://www.adobe.com/support/security/bulletins/apsb13-07.html
http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00024.html
http://www.adobe.com/support/security/advisories/apsa13-02.html
http://security.gentoo.org/glsa/glsa-201308-03.xml
Known Exploited Vulnerability Information
| Source | Added Date |
|---|---|
| CISA | 2022-03-03 00:00:00 UTC |