KEVIntel
9.8
CVSS
Critical

CVE-2013-2729

PUBLISHED

Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary...

Exploited in the wild Remote Low complexity No user interaction
Vendor
Adobe
Product
Reader and Acrobat
Published
May 16, 2013
EPSS

Description

Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-2727.

cisa

CVSS scores

CVSS v3.1 9.8 Critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 10.0

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitation status

Exploited in the wild

Recorded 2022-03-28 00:00:00 UTC · Source

SSVC decision points

Exploitation
active
Automatable
No
Technical impact
total

Known exploited vulnerability sources

Catalogues that list this CVE as a known exploited vulnerability.

Source Added
CISA Mar 28, 2022

Potential proof of concepts

These PoCs are unverified and could contain malware. Use at your own risk.

feliam/CVE-2013-2729

github · Created 2013-05-15 04:12:13 UTC · 24 stars

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Added to KEVIntel