CVEvulnerability

CVE-2013-0641

7.8 HIGH Known exploited Published 2013-02-14 Modified 2026-06-16 Official page ↗

CISA Known Exploited Vulnerability

Adobe Reader Buffer Overflow Vulnerability — Adobe Reader

A buffer overflow vulnerability exists in Adobe Reader which allows an attacker to perform remote code execution.

Added to KEV
2022-03-03
Remediation due
2022-03-24
Ransomware use
Unknown
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2013-0641
Status
Analyzed
Published
2013-02-14
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-120

Description

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013.

Affected configurations

• adobe acrobat (>= 9.0 < 9.5.4) • adobe acrobat (>= 10.0 < 10.1.6) • adobe acrobat (>= 11.0 < 11.0.02) • adobe acrobat reader (>= 10.0 < 10.1.6) • adobe acrobat reader (>= 11.0 < 11.0.02) • adobe acrobat reader (>= 9.0 < 9.5.4) • redhat enterprise linux desktop 6.0 • redhat enterprise linux eus 5.9 • redhat enterprise linux eus 6.4 • redhat enterprise linux server 6.0 • redhat enterprise linux server aus 5.9 • redhat enterprise linux server aus 6.4 • redhat enterprise linux workstation 6.0 • opensuse opensuse 11.4 • opensuse opensuse 12.1 • suse linux enterprise desktop 10 • suse linux enterprise desktop 11

Related

Weakness · CWE (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

References